TA-dmarc

TA-dmarc copied to clipboard

The end

2

Hey @hkelley, I'm slowly moving away from Splunk and don't have much time, the Splunk infrastructure or license anymore to keep this project going in a meaningful way. So my...

jorritfolmer

TA-dmarc - No longer pulling events - TypeError

8

Good afternoon, We have the TA-dmarc add-on installed on our HF and recently stopped receiving dmarc events on Friday, April 14, 2023. After reenabling the inputs and performing a restart...

mikegvalerio

Office 365 Azure configuration

3

I'm trying to setup an input for OAuth2 to connect to an Office 365 email account without success. I'm using the user and password for the account and in the...

diogofgm

IMAP input skips messages without "Report Domain:" in the subject

2

Splunk 9.0.3 TA-dmarc 4.1.1 The IMAP input appears to only select messages with the text "Report Domain:" in the subject. ``` # TA-dmarc/bin/dmarc/imap2dir.py:164 messages = self.server.search('SUBJECT "Report domain:"') ``` >...

tfrederick74656

Add support for OAuth

36

Because e.g. Gmail is dropping support for user/pass authentication: https://gsuiteupdates.googleblog.com/2019/12/less-secure-apps-oauth-google-username-password-incorrect.html

jorritfolmer

Unable to store reports http 404

1

Hello, I am trying to get dmarc reports from IMAP using the master version (as the current version from splunkbase wasn't working) without any success. So far, i tried App...

lp-fgo

imaplib.IMAP4.abort: socket error: [Errno 32] Broken pipe

1

Splunk Version - 8.1.3 App Version 3.2.4 Also, |inputlookup ta_dmarc_checkpointer_lookup is growing exponentially. can I suggest you to have latest entry in checkpoint instead of having all entries of UIDs...

balajifunny

Attacks on reporting URIs as mentioned in RFC 7489

2

RFC7489 mentions a number of threats against DMARC reporting URI's in chapter 12.2. Below is a short discussion of the current mitigation scope. | Threat | Mitigation | |--------|------------| |...

jorritfolmer