forked from csirtgadgets/csirtg-smrt-v1
-
Notifications
You must be signed in to change notification settings - Fork 0
Examples
Wes edited this page Apr 12, 2017
·
2 revisions
Getting started with YAML is simple, with a basic set of fields it's easy to tell csirtg-smrt how to normalize your data.
defaults:
tags: phishing
protocol: tcp
provider: openphish.com
tlp: green
reference_tlp: white
confidence: 9
values: indicator
feeds:
urls:
itype: url
pattern: ^(.+)$
remote: https://openphish.com/feed.txt