restriction = 'need-to-know'
guid = everyone
alternativeid_restriction = 'public'
source = 'localhost'
description = 'unknown local'
assessment = 'whitelist'
[url_shortners]
parser = txt
description = 'url shortning service'
regex = '^(\S+)'
regex_values = 'url'
confidence = 85
alternativeid_restriction = need-to-know
mirror = /tmp
zip_filename = 'url_shorteners.txt'
[domains]
feed = etc/whitelist_domains
parser = txt
regex = '^(\S+)$'
regex_values = 'fqdn'
confidence = 95
[infrastructure]
feed = etc/whitelist_infrastructure
parser = txt
regex = '^(\S+)$'
regex_values = 'ipv4'
confidence = 95
[urls]
feed = etc/whitelist_urls
parser = txt
regex = '^(\S+)$'
regex_values = 'url'
confidence = 95