Add SMTP TLS test and fix YARA-L boolean comparisons

Co-authored-by: seanthegeek <44679+seanthegeek@users.noreply.github.com>
This commit is contained in:
copilot-swe-agent[bot]
2026-01-09 18:26:37 +00:00
co-authored by seanthegeek
parent 6ad7233983
commit cf916509ea
2 changed files with 36 additions and 2 deletions
+2 -2
View File
@@ -207,7 +207,7 @@ rule dmarc_aggregate_failures {
$e.metadata.product_name = "parsedmarc"
$e.event_type = "DMARC_AGGREGATE"
$e.security_result.detection_fields.key = "dmarc_pass"
$e.security_result.detection_fields.value = "false"
$e.security_result.detection_fields.value = false
condition:
$e
@@ -244,7 +244,7 @@ rule repeated_dmarc_failures {
$e.metadata.product_name = "parsedmarc"
$e.event_type = "DMARC_AGGREGATE"
$e.security_result.detection_fields.key = "dmarc_pass"
$e.security_result.detection_fields.value = "false"
$e.security_result.detection_fields.value = false
$e.principal.ip = $source_ip
match: