forked from rabbitstack/fibratus
-
Notifications
You must be signed in to change notification settings - Fork 0
/
Copy pathschema.yml
132 lines (120 loc) · 2.68 KB
/
schema.yml
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
type: map
mapping:
image_meta:
type: map
mapping:
enabled:
type: bool
required: True
imports:
type: bool
file_info:
type: bool
skips:
type: map
required: True
mapping:
images:
type: seq
sequence:
- type: str
output:
type: seq
required: True
sequence:
- type: map
mapping:
console:
type: map
mapping:
format:
type: str
enum: ['pretty', 'json']
amqp:
type: map
mapping:
host:
type: str
port:
type: int
username:
type: str
password:
type: str
vhost:
type: str
exchange:
type: str
required: True
routingkey:
type: str
required: True
smtp:
type: map
mapping:
host:
type: str
required: True
port:
type: int
password:
type: str
from:
type: str
pattern: .+@.+
to:
type: seq
sequence:
- type: str
pattern: .+@.+
elasticsearch:
type: map
mapping:
hosts:
type: seq
required: True
sequence:
- type: str
required: True
index:
type: str
required: True
index_type:
type: str
enum: ['fixed', 'daily']
daily_index_format:
type: str
document:
type: str
required: True
bulk:
type: bool
username:
type: str
password:
type: str
ssl:
type: bool
fs:
type: map
mapping:
path:
type: str
required: True
mode:
type: str
enum: ['r', 'w', 'x', 'a', 'r+', 'w+']
format:
type: str
enum: ['json']
binding:
type: seq
sequence:
- type: map
mapping:
yara:
type: map
mapping:
path:
type: str
required: True