Actions
Feature #549
closedExtract file attachments from emails
Effort:
Difficulty:
Label:
Description
Extract file attachments from emails for the filestore keyword
Actions
Added by David André about 13 years ago. Updated about 6 years ago.
Description
Extract file attachments from emails for the filestore keyword
Any suggestion as to how would Suri go around the encrypted part?
Anoop please review what will be submitted.
@Peter: in case of STARTTLS we can't do much, encrypted attachments we can store but not decrypt obviously.
This is being created here: https://github.com/inliniac/suricata/pull/179
Added through https://github.com/inliniac/suricata/pull/1195