Update and rename network/cql-native-transport-detect.yaml to network/detection/cql-native-transport.yaml

network/detection/cql-native-transport.yaml

@@ -1,7 +1,7 @@
-id: cql-native-transport-detect
+id: cql-native-transport
 
 info:
-  name: CQL Native Transport Detection
+  name: CQL Native Transport Detect
   author: pussycat0x
   severity: info
   description: |
@@ -9,7 +9,7 @@ info:
   metadata:
     verified: true
     shodan-query: "cassandra"
-  tags: network,cassandra
+  tags: network,cassandra,cql
 
 network:
   - inputs:
@@ -26,6 +26,11 @@ network:
       - "{{Hostname}}"
       - "{{Host}}:9042"
 
+    matchers:
+      - type: word
+        words:
+          - "valid or unsupported protocol"
+
     extractors:
       - type: regex
         regex: