]> git.ipfire.org Git - thirdparty/suricata.git/commit
detect: add email.cc keyword 12840/head
authorAlice Akaki <akakialice@gmail.com>
Sat, 22 Mar 2025 01:25:48 +0000 (21:25 -0400)
committerVictor Julien <victor@inliniac.net>
Thu, 27 Mar 2025 05:52:30 +0000 (06:52 +0100)
commit7ba4ebdc2c6e13cf8dc691c4200d923f36cc7b48
tree5f0df8dd1f07a982c6a3d655458fd969975d2333
parent9c3c6cf4cc8fb28e920023bbeb263293c8f03566
detect: add email.cc keyword

email.cc matches on MIME EMAIL Carbon Copy
This keyword maps to the EVE field email.cc[]
It is a sticky buffer
Supports prefiltering

Ticket: #7588
doc/userguide/rules/email-keywords.rst
doc/userguide/rules/multi-buffer-matching.rst
rust/src/mime/detect.rs
src/detect-email.c