CyberSecDef
commented
4 years ago For CKLS if FQDN, use it if not FQDN, but hostname...use hostname if not fqdn and not hostname, use IP if not fqdn, not hostname, not ip, use empty string
Closed sagansapien closed 4 years ago
CyberSecDef
commented
4 years ago For CKLS if FQDN, use it if not FQDN, but hostname...use hostname if not fqdn and not hostname, use IP if not fqdn, not hostname, not ip, use empty string
filter has two entries for a given hostname if CKL and ACAS is ingested. Scan type CKL: Hostname = HOSTNAME Scan type ACAS: Hostname = hostname.fqdn.mil Recommend to grab FQDN instead of hostname from CKL file, so hostname filter returns 1 host with both scan types. Also force to lower case?