]> git.ipfire.org Git - thirdparty/suricata.git/commit
detect: add email.to keyword 12836/head
authorAlice Akaki <akakialice@gmail.com>
Wed, 26 Mar 2025 08:36:29 +0000 (04:36 -0400)
committerVictor Julien <victor@inliniac.net>
Wed, 26 Mar 2025 13:28:22 +0000 (14:28 +0100)
commit5d6a072e3583eaf720560dc5c88477371d544179
tree4801d6d520a2a60b2e816f10c90d7e4da57bb5c5
parent09aed7e243127741721bd3e490c73d344234b17a
detect: add email.to keyword

email.to matches on MIME EMAIL TO
This keyword maps to the EVE field email.to[]
It is a sticky buffer
Supports prefiltering

Ticket: #7596
doc/userguide/rules/email-keywords.rst
src/detect-email.c