Can we remove URL indicators with specific keyword ?

shanu2405 — Wed, 26 Aug 2020 06:55:20 GMT

Hello,

I am trying to push Cofense indicators to different devices, but want to exclude some URLs as those are not accepted by the devices.

I want to ignore URLs with sign "√" and "@" in domain.

Thanks in advance

Re: Can we remove URL indicators with specific keyword ?

BPry — Wed, 26 Aug 2020 13:15:02 GMT

That article should point in in the right direction. Take a look at ignore_regex and filter sets in particular.