The intelligence framework provides a way to store and query intelligence data (such as IP addresses or strings). Metadata can also be associated with the intelligence.
base/frameworks/intel/__load__.bro
base/frameworks/intel/main.bro
The intelligence framework provides a way to store and query IP addresses, and strings (with a str_type). Metadata can also be associated with the intelligence, like for making more informed decisions about matching and handling of intelligence.