Files
splunk-security_content/macros/brand_abuse_dns.yml
2019-10-16 16:38:05 +02:00

6 lines
246 B
YAML

definition: lookup update=true brandMonitoring_lookup domain as query OUTPUT domain_abuse
| search domain_abuse=true
description: This macro limits the output to only domains that are in the brand monitoring
lookup file
name: brand_abuse_dns