Skip to content

SpamAssassin#

SpamAssassin#

Author: Davide Arcuri - LDO-CERT
License: AGPL-V3
Version: 1.0
Supported observables types:
- file
Registration required: False
Subscription required: False
Free subscription: False
Third party service: https://spamassassin.apache.org/

Description#

Get spam score from local SpamAssassin instance

Configuration#

url SpamAssassin url
Default value if not configured N/A
Type of the configuration item string
The configuration item can contain multiple values False
Is required True
port SpamAssassin port
Default value if not configured N/A
Type of the configuration item number
The configuration item can contain multiple values False
Is required True
spam_score Minimum score to consider mail as spam
Default value if not configured N/A
Type of the configuration item number
The configuration item can contain multiple values False
Is required False
timeout Timout for socket operations in seconds
Default value if not configured N/A
Type of the configuration item number
The configuration item can contain multiple values False
Is required False

Templates samples for TheHive#

SpamAssassin long report sample

screenshot


Last update: October 16, 2020 10:16:05