Skip to content

Commit

Permalink
Merge pull request #1831 from SEKOIA-IO/gaelmuller-patch-1
Browse files Browse the repository at this point in the history
Remove Host <> IP rules from the documentation
  • Loading branch information
gaelmuller authored Jun 11, 2024
2 parents 9205427 + cfc9f09 commit 459c29c
Showing 1 changed file with 0 additions and 14 deletions.
14 changes: 0 additions & 14 deletions docs/xdr/features/collect/assets.md
Original file line number Diff line number Diff line change
Expand Up @@ -142,20 +142,6 @@ The following table lists the atom types and their related event fields that are

## Asset Discovery Rules

### Attach IP to Host

**Attach `host.ip` to Host**

This rule enriches an existing asset with new `ipv4` or `ipv6` contextual properties. These properties are extracted from the value of an event `host.ip` field when the `hostname` detection property of the asset matches with the `host.name` field of the event.

**Attach `source.ip` to Host**

This rule enriches an existing asset with new `ipv4` or `ipv6` contextual properties. These properties are extracted from the `source.ip` field of an event when the `hostname` detection property of the asset matches with the `source.host` field of the event.

**Attach `destination.ip` to Host and categorize it as Server**

This rule enriches an existing asset with new `ipv4` or `ipv6` contextual properties. These properties are extracted from the `destination.ip` field of an event when the `hostname` detection property of the asset matches with the `destination.host` field of the event.

### Attach Operating System (OS) to Host

**Set the Contextual Property `os` to Host**
Expand Down

0 comments on commit 459c29c

Please sign in to comment.