mirror of
https://github.com/domainaware/parsedmarc.git
synced 2026-05-25 05:15:24 +00:00
Preserve native types for booleans and integers in UDM output
Co-authored-by: seanthegeek <44679+seanthegeek@users.noreply.github.com>
This commit is contained in:
@@ -82,9 +82,9 @@ Each event includes:
|
||||
"detection_fields": [
|
||||
{"key": "dmarc_disposition", "value": "none"},
|
||||
{"key": "dmarc_policy", "value": "none"},
|
||||
{"key": "dmarc_pass", "value": "false"},
|
||||
{"key": "spf_aligned", "value": "false"},
|
||||
{"key": "dkim_aligned", "value": "false"}
|
||||
{"key": "dmarc_pass", "value": false},
|
||||
{"key": "spf_aligned", "value": false},
|
||||
{"key": "dkim_aligned", "value": false}
|
||||
]
|
||||
}],
|
||||
"additional": {
|
||||
@@ -93,7 +93,7 @@ Each event includes:
|
||||
{"key": "report_id", "value": "b043f0e264cf4ea995e93765242f6dfb"},
|
||||
{"key": "report_begin", "value": "2018-06-19 00:00:00"},
|
||||
{"key": "report_end", "value": "2018-06-19 23:59:59"},
|
||||
{"key": "message_count", "value": "1"},
|
||||
{"key": "message_count", "value": 1},
|
||||
{"key": "interval_begin", "value": "2018-06-19 00:00:00"},
|
||||
{"key": "interval_end", "value": "2018-06-19 23:59:59"},
|
||||
{"key": "envelope_from", "value": "example.com"}
|
||||
@@ -164,7 +164,7 @@ Each event includes:
|
||||
{"key": "report_begin", "value": "2016-04-01T00:00:00Z"},
|
||||
{"key": "report_end", "value": "2016-04-01T23:59:59Z"},
|
||||
{"key": "result_type", "value": "certificate-expired"},
|
||||
{"key": "failed_session_count", "value": "100"}
|
||||
{"key": "failed_session_count", "value": 100}
|
||||
]
|
||||
},
|
||||
"principal": {
|
||||
|
||||
@@ -206,9 +206,9 @@ class GoogleSecOpsClient:
|
||||
"detection_fields": [
|
||||
{"key": "dmarc_disposition", "value": disposition},
|
||||
{"key": "dmarc_policy", "value": policy_published["p"]},
|
||||
{"key": "dmarc_pass", "value": str(dmarc_pass).lower()},
|
||||
{"key": "spf_aligned", "value": str(spf_aligned).lower()},
|
||||
{"key": "dkim_aligned", "value": str(dkim_aligned).lower()},
|
||||
{"key": "dmarc_pass", "value": dmarc_pass},
|
||||
{"key": "spf_aligned", "value": spf_aligned},
|
||||
{"key": "dkim_aligned", "value": dkim_aligned},
|
||||
],
|
||||
}
|
||||
],
|
||||
@@ -218,7 +218,7 @@ class GoogleSecOpsClient:
|
||||
{"key": "report_id", "value": report_metadata["report_id"]},
|
||||
{"key": "report_begin", "value": report_metadata["begin_date"]},
|
||||
{"key": "report_end", "value": report_metadata["end_date"]},
|
||||
{"key": "message_count", "value": str(count)},
|
||||
{"key": "message_count", "value": count},
|
||||
{"key": "interval_begin", "value": interval_begin},
|
||||
{"key": "interval_end", "value": interval_end},
|
||||
{"key": "envelope_from", "value": envelope_from},
|
||||
@@ -474,7 +474,7 @@ class GoogleSecOpsClient:
|
||||
{"key": "report_begin", "value": begin_date},
|
||||
{"key": "report_end", "value": end_date},
|
||||
{"key": "result_type", "value": failure.get("result_type", "")},
|
||||
{"key": "failed_session_count", "value": str(failure.get("failed_session_count", 0))},
|
||||
{"key": "failed_session_count", "value": failure.get("failed_session_count", 0)},
|
||||
]
|
||||
},
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user