id: gopher-detection
info:
name: Gopher Detection
author: pry0cc
severity: info
tags: network,gopher
network:
- inputs:
- data: "\r\n"
host:
- "{{Hostname}}"
- "{{Host}}:70"
matchers:
- type: dsl
dsl:
- "contains(to_lower(raw), 'gopher')"