In our main target (the seed of the scan), it makes sense to store all the events. Here you can have multiple events for the same host, e.g. http://evilcorp.com, bob@evilcorp.com, evilcorp.com:80, etc. However, for whitelists and blacklists, it's only necessary to store the hosts.
In our main target (the seed of the scan), it makes sense to store all the events. Here you can have multiple events for the same host, e.g.
http://evilcorp.com
,bob@evilcorp.com
,evilcorp.com:80
, etc. However, for whitelists and blacklists, it's only necessary to store the hosts.This change will help out a lot with
bbot-io
.