Skip to content

SpamAssassin#

SpamAssassin#

Author: Davide Arcuri - LDO-CERT
License: AGPL-V3
Version: 1.0
Supported observables types:
- file
Registration required: False
Subscription required: False
Free subscription: False
Third party service: https://spamassassin.apache.org/

Description#

Get spam score from local SpamAssassin instance

Configuration#

url SpamAssassin url
Default value if not configured N/A
Type of the configuration item string
The configuration item can contain multiple values False
Is required True
port SpamAssassin port
Default value if not configured 783
Type of the configuration item number
The configuration item can contain multiple values False
Is required True
spam_score Minimum score to consider mail as spam
Default value if not configured 5
Type of the configuration item number
The configuration item can contain multiple values False
Is required False
timeout Timout for socket operations in seconds
Default value if not configured 20
Type of the configuration item number
The configuration item can contain multiple values False
Is required False

Templates samples for TheHive#

SpamAssassin long report sample

SpamAssassin mini report sample