Project

General

Profile

Actions
Copy link

Feature #7586

open
JF OD

Feature #7600: mime: add rule keywords

mime: expose 'headers' as a keyword

Feature #7586: mime: expose 'headers' as a keyword

Added by Juliana Fajardini Reichow about 1 year ago. Updated 4 months ago.

Status:
Assigned
Priority:
Normal
Assignee:
OISF Dev
Target version:
9.0.0-beta1
Effort:
Difficulty:
Label:

Description

Something like smtp.headers or perhaps smtp.mime.headers?

As we have for http headers. If it would make sense, also have a .raw version.

Related issues 9 (1 open — 8 closed)

Related to Suricata - Feature #7587: mime: add email.body_md5 keywordClosedAlice da Silva AkakiActions
Related to Suricata - Task #7591: mime: add email.date keywordClosedAlice da Silva AkakiActions
Related to Suricata - Feature #7592: mime: add email.from keywordClosedAlice da Silva AkakiActions
Related to Suricata - Feature #7595: mime: add email.subject keywordClosedAlice da Silva AkakiActions
Related to Suricata - Feature #7596: mime: add email.to keywordClosedAlice da Silva AkakiActions
Related to Suricata - Feature #7597: mime: add email.url keywordClosedAlice da Silva AkakiActions
Related to Suricata - Task #7598: mime: add email.x_mailerClosedAlice da Silva AkakiActions
Related to Suricata - Documentation #7683: mime: add email.attachment keywordClosedAlice da Silva AkakiActions
Blocks Suricata - Story #7901: 9.0.0: rules: improve rules keyword/output parityAssignedVictor JulienActions

JF Updated by Juliana Fajardini Reichow about 1 year ago Actions
Copy link
 #1

  • Blocks Story #6597: rules: improve rules keyword/output parity added

VJ Updated by Victor Julien about 1 year ago Actions
Copy link
 #2

  • Subject changed from mime: expose header as keyword to mime: expose headers as keyword
  • Description updated (diff)

JF Updated by Juliana Fajardini Reichow about 1 year ago Actions
Copy link
 #3

  • Related to Feature #7587: mime: add email.body_md5 keyword added

JF Updated by Juliana Fajardini Reichow about 1 year ago Actions
Copy link
 #4

  • Subject changed from mime: expose headers as keyword to mime: expose 'headers' as a keyword

JF Updated by Juliana Fajardini Reichow about 1 year ago Actions
Copy link
 #5

  • Related to Task #7591: mime: add email.date keyword added

JF Updated by Juliana Fajardini Reichow about 1 year ago Actions
Copy link
 #6

JF Updated by Juliana Fajardini Reichow about 1 year ago Actions
Copy link
 #7

  • Related to Feature #7595: mime: add email.subject keyword added

JF Updated by Juliana Fajardini Reichow about 1 year ago Actions
Copy link
 #8

JF Updated by Juliana Fajardini Reichow about 1 year ago Actions
Copy link
 #9

JF Updated by Juliana Fajardini Reichow about 1 year ago Actions
Copy link
 #10

  • Related to Task #7598: mime: add email.x_mailer added

JF Updated by Juliana Fajardini Reichow about 1 year ago Actions
Copy link
 #11

  • Parent task set to #7600

VJ Updated by Victor Julien about 1 year ago Actions
Copy link
 #12

  • Tracker changed from Task to Feature

VJ Updated by Victor Julien about 1 year ago Actions
Copy link
 #13

  • Status changed from New to Assigned
  • Assignee changed from OISF Dev to Alice da Silva Akaki

VJ Updated by Victor Julien 12 months ago Actions
Copy link
 #14

  • Target version changed from 8.0.0-beta1 to 8.0.0-rc1

AD Updated by Alice da Silva Akaki 11 months ago Actions
Copy link
 #15

VJ Updated by Victor Julien 10 months ago Actions
Copy link
 #16

  • Target version changed from 8.0.0-rc1 to 9.0.0-beta1

VJ Updated by Victor Julien 7 months ago Actions
Copy link
 #17

  • Blocks deleted (Story #6597: rules: improve rules keyword/output parity)

VJ Updated by Victor Julien 7 months ago Actions
Copy link
 #18

  • Blocks Story #7901: 9.0.0: rules: improve rules keyword/output parity added

JF Updated by Juliana Fajardini Reichow 4 months ago Actions
Copy link
 #19

  • Assignee changed from Alice da Silva Akaki to OISF Dev

Hi there, considering our stale tickets policy, I'm unclaiming this ticket. Feel free to ask to work on this or another again, if you have time in the future :)

Actions
Copy link

Also available in: PDF Atom