Namespace: | SMTP |
---|---|
Imports: | base/frameworks/notice/main.bro, base/protocols/smtp/main.bro |
Source File: | /scripts/policy/protocols/smtp/detect-suspicious-orig.bro |
SMTP::suspicious_origination_countries: set &redef | Places where it’s suspicious for mail to originate from represented as all-capital, two character country codes (e.g., US). |
SMTP::suspicious_origination_networks: set &redef |
Notice::Type: enum |