Improvement
- Updaters (and services as a result) are more perceptive/responsive of local changes made to update sources/signatures.
- Services that have updaters will have a
signatures_metaattributes that contains the metadata of the signatures relevant to the system it's deployed on.- For example: if a user changes the state of the signature from DEPLOYED → NOISY, then the
signatures_metaattribute should be updated too so the service can account for the state change and apply analysis accordingly (ie. override section scoring to 0) - The
signatures_metaattribute contains about the signature:classification,source,status,signature_id(key),name-
signatures_meta = { "<signature_id>": { "classfication": "TLP:C", "source": "my_source", "status": "DEPLOYED", "name": "my_name" } ... }
-
- For example: if a user changes the state of the signature from DEPLOYED → NOISY, then the