Actions
Feature #6439
closed
BM
JL
rules: add to_lowercase transform
Feature #6439:
rules: add to_lowercase transform
Effort:
Difficulty:
Label:
Description
Hoping to get a to_lowercase transformation that can be combined with others. The use case is to allow for the "normalization" of a mixed case URL to lowercase. This would allow the url to be obfuscated and account for multiple variations of casing within the field.
http.uri; to_lowercase; to_sha256; content:"<sha256 digest>";
Actions