]> git.ipfire.org Git - thirdparty/suricata.git/commit
detect: add mime email.subject keyword 12815/head
authorAlice Akaki <akakialice@gmail.com>
Thu, 20 Mar 2025 21:32:58 +0000 (17:32 -0400)
committerVictor Julien <victor@inliniac.net>
Sat, 22 Mar 2025 06:12:01 +0000 (07:12 +0100)
commit09db7c7ac128c51ce4a40d5c3bd3f7cbbfee9fe3
treee2b17b7ef47c044a6bf4de0b41ee68ef3c25dea1
parent7fdb08b7c759324dc37865c5c791d867392b529d
detect: add mime email.subject keyword

email.subject matches on MIME EMAIL SUBJECT
This keyword maps to the EVE field email.subject
It is a sticky buffer
Supports prefiltering

Ticket: #7595
doc/userguide/rules/email-keywords.rst
src/detect-email.c