diff --git a/dns/bimi-detect.yaml b/dns/bimi-detect.yaml new file mode 100644 index 0000000000..35b42ccff2 --- /dev/null +++ b/dns/bimi-detect.yaml @@ -0,0 +1,24 @@ +id: bimi-record-detect + +info: + name: BIMI Record - Detection + author: rxerium + severity: info + description: | + A BIMI record was detected + reference: + - https://postmarkapp.com/blog/what-the-heck-is-bimi + tags: dns,bimi + +dns: + - name: "{{FQDN}}" + type: TXT + matchers: + - type: word + words: + - "v=BIMI1" + + extractors: + - type: regex + regex: + - "v=BIMI1(.+)" \ No newline at end of file