format & name -update
parent
51aba21c27
commit
ef2e2c1315
|
@ -0,0 +1,21 @@
|
||||||
|
id: dns-dmarc-detect
|
||||||
|
|
||||||
|
info:
|
||||||
|
name: DNS DMARC Detection
|
||||||
|
author: juliosmelo
|
||||||
|
description: DMARC is an open email authentication protocol that provides domain-level protection of the email channel. DMARC authentication detects and prevents email spoofing techniques used in phishing, business email compromise (BEC) and other email-based attacks.
|
||||||
|
severity: info
|
||||||
|
tags: dns,dmarc
|
||||||
|
reference:
|
||||||
|
- https://dmarc.org/
|
||||||
|
- https://dmarc.org/wiki/FAQ#Why_is_DMARC_important.3F
|
||||||
|
|
||||||
|
dns:
|
||||||
|
- name: "_dmarc.{{FQDN}}"
|
||||||
|
type: TXT
|
||||||
|
|
||||||
|
extractors:
|
||||||
|
- type: regex
|
||||||
|
group: 1
|
||||||
|
regex:
|
||||||
|
- "IN\tTXT\t(.+)"
|
|
@ -1,21 +0,0 @@
|
||||||
id: dmarc-detection
|
|
||||||
|
|
||||||
info:
|
|
||||||
name: DMARC Detection
|
|
||||||
description: Check if Domain-based Message Authentication, Reporting & Conformance are enabled. DMARC record provides information about email authentication, policy, and reporting protocol.
|
|
||||||
author: juliosmelo
|
|
||||||
severity: info
|
|
||||||
tags: dns,dmarc
|
|
||||||
reference:
|
|
||||||
- https://dmarc.org/
|
|
||||||
- https://dmarc.org/wiki/FAQ#Why_is_DMARC_important.3F
|
|
||||||
|
|
||||||
dns:
|
|
||||||
- name: "_dmarc.{{FQDN}}"
|
|
||||||
type: TXT
|
|
||||||
|
|
||||||
extractors:
|
|
||||||
- type: regex
|
|
||||||
group: 1
|
|
||||||
regex:
|
|
||||||
- "IN\tTXT\t(.+)"
|
|
Loading…
Reference in New Issue