id: smtp-service-detect info: name: SMTP Service Detection author: pussycat0x severity: info description: | SMTP is part of the application layer of the TCP/IP protocol. Using a process called “store and forward,” SMTP moves your email on and across networks. metadata: max-request: 1 tags: network,service,smtp,detect tcp: - inputs: - data: "\r\n" host: - "{{Hostname}}" port: 25 matchers: - type: word words: - "SMTP"