Skip to content

Commit

Permalink
docs
Browse files Browse the repository at this point in the history
  • Loading branch information
Cisphyx committed Nov 11, 2024
1 parent 4a3f735 commit 6281edc
Show file tree
Hide file tree
Showing 3 changed files with 8 additions and 8 deletions.
2 changes: 1 addition & 1 deletion docs/synapse/glossary.rst
Original file line number Diff line number Diff line change
Expand Up @@ -534,7 +534,7 @@ Form, Composite
---------------

A category of form whose primary property is an ordered set of two or more comma-separated typed values. Examples
include DNS A records (``inet:dns:a``) and web-based accounts (``inet:web:acct``).
include DNS A records (``inet:dns:a``) and HTTP headers (``inet:http:header``).


.. _gloss-form-extended:
Expand Down
8 changes: 4 additions & 4 deletions docs/synapse/userguides/storm_adv_vars.rstorm
Original file line number Diff line number Diff line change
Expand Up @@ -340,11 +340,11 @@ You can assign an explicit, unchanging value to a variable.

You can assign the value of a particular node property (secondary or universal) to a variable.

- **Secondary property:** Assign the ``:user`` property from an Internet-based account (``inet:web:acct``) to
the variable ``$user``:
- **Secondary property:** Assign the ``:email`` property from an Internet-based account (``inet:service:account``) to
the variable ``$email``:

.. storm-pre:: [inet:web:acct=(twitter.com,hacks4cats) :[email protected]]
.. storm-cli:: inet:web:acct=(twitter.com,hacks4cats) $user=:user $lib.print($user)
.. storm-pre:: [inet:service:account=(twitter.com,hacks4cats) :[email protected]]
.. storm-cli:: inet:service:account=(twitter.com,hacks4cats) $email=:email $lib.print($email)


- **Universal property:** Assign the ``.seen`` universal property from a DNS A node to the variable ``$time``:
Expand Down
6 changes: 3 additions & 3 deletions docs/synapse/userguides/storm_ref_type_specific.rstorm
Original file line number Diff line number Diff line change
Expand Up @@ -1421,10 +1421,10 @@ Lift all organizations whose name starts with the word "Acme ":

.. storm-cli:: ou:org:name^='acme '

Filter a set of Internet accounts to those with usernames starting with 'matrix':
Filter a set of service accounts to those with usernames starting with 'matrix':

.. storm-pre:: [ inet:web:acct=(twitter.com,matrixmaster) inet:web:acct=(twitter.com,matrixneo) ]
.. storm-cli:: inet:web:acct:site=twitter.com +:user^=matrix
.. storm-pre:: [ (inet:service:account=* :user=matrixmaster) (inet:service:account=* :user=matrixneo) ]
.. storm-cli:: inet:service:account +:user^=matrix


Strings and string-derived types can also be lifted or filtered using the regular expression extended comparator
Expand Down

0 comments on commit 6281edc

Please sign in to comment.