Skip to content

Commit edf733b

Browse files
author
tylabs
committed
generalize name
1 parent 1e9d1ca commit edf733b

3 files changed

Lines changed: 4 additions & 4 deletions

File tree

‎CLUSTER.md‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
# Zeek Cluster Setup for Dovehawk.io
1+
# Zeek Cluster Setup for Dovehawk
22

33
The Dovehawk Zeek module can be run in a cluster with a central manager and many remote worker's each monitoring their own local interface. You can also use a cluster locally to distribute bandwidth automatically to distribute load for monitoring traffic even up to the 10-20Gbs range on sufficient hardware.
44

‎config.zeek‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,7 @@ export {
2424

2525
#skip signature download if recent
2626
global SKIP_SIGNATURE_DOWNLOAD: bool = T;
27-
global CLUSTER_ID = "dovehawk.io"; #source name for MISP sightings
27+
global CLUSTER_ID = "dovehawk"; #source name for MISP sightings
2828

2929

3030

‎scripts/dovehawk.zeek‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
##! Dovehawk Zeek Module V 1.02.002 2021 01 14 @tylabs dovehawk.io
1+
##! Dovehawk Zeek Module V 1.02.002 2021 01 14 @tylabs dovehawk
22
# This module downloads Zeek Intelligence Framework items and Signature Framework Zeek items from MISP.
33
# Sightings are reported back to MISP and optionally to a Slack webhook.
44
# This script could be easily modified to send hits to a central database / web dashboard or to add in indicators from other sources.
@@ -115,7 +115,7 @@ function load_sigs_misp() {
115115
local f = open(tmp_fname);
116116
local cnt = 0;
117117
enable_raw_output(f);
118-
print f,"# Dovehawk.io Content Signatures - Sig events should have SIG_PREFIX prefix\n\n";
118+
print f,"# Dovehawk Content Signatures - Sig events should have SIG_PREFIX prefix\n\n";
119119

120120
for (line in lines) {
121121
# don't write lines with double ## at start

0 commit comments

Comments
 (0)