id: gopher-detection info: name: Gopher Detection author: pry0cc severity: info tags: network,gopher network: - inputs: - data: "\r\n" host: - "{{Hostname}}" - "{{Host}}:70" matchers: - type: dsl dsl: - "contains(to_lower(raw), 'gopher')"