]> git.ipfire.org Git - thirdparty/suricata.git/commit
detect: add email.url keyword 13016/head
authorAlice Akaki <akakialice@gmail.com>
Wed, 9 Apr 2025 19:10:43 +0000 (15:10 -0400)
committerVictor Julien <victor@inliniac.net>
Sat, 12 Apr 2025 09:00:05 +0000 (11:00 +0200)
commitca429ef5e30fc06c95efe6d906e5f9e88d405e8f
treee96870e01b7ce24e9986c650dd81ac60da6ac54c
parentbea685bfcd0e7e3dc4294988c1e41a0de5464161
detect: add email.url keyword

email.url matches on URLs extracted from an email
This keyword maps to the EVE field email.url[]
Supports multiple buffer matching
Supports prefiltering

Ticket: #7597
doc/userguide/rules/email-keywords.rst
doc/userguide/rules/multi-buffer-matching.rst
rust/src/mime/detect.rs
src/detect-email.c