Files
splunk-security_content/macros/brand_abuse_web.yml
2019-10-16 16:38:05 +02:00

6 lines
245 B
YAML

definition: lookup update=true brandMonitoring_lookup domain as urls OUTPUT domain_abuse
| search domain_abuse=true
description: This macro limits the output to only domains that are in the brand monitoring
lookup file
name: brand_abuse_web