diff --git a/modules/signatures/network/network_http.py b/modules/signatures/network/network_http.py index ee596f8a..5b4b56bd 100644 --- a/modules/signatures/network/network_http.py +++ b/modules/signatures/network/network_http.py @@ -28,10 +28,13 @@ class NetworkHTTP(Signature): ] def on_complete(self): - for http in getattr(self, "get_net_http_ex", lambda: [])(): - if http["host"] in self.host_safelist: + for http in self.get_net_http(): + if http["host"].endswith(self.exclude_domain_tails): + continue + self.mark_ioc("request", "%s %s" % (http["method"], http["uri"])) + for http in self.get_net_generic("https_ex"): + if http["host"].endswith(self.exclude_domain_tails): continue - self.mark_ioc("request", "%s %s://%s%s" % ( http["method"], http["protocol"], http["host"], http["uri"], ))