id: spf-record-detect info: name: SPF Record - Detection author: rxerium severity: info description: | An SPF TXT record was detected reference: - https://www.mimecast.com/content/how-to-create-an-spf-txt-record metadata: max-request: 1 tags: dns,spf,discovery dns: - name: "{{FQDN}}" type: TXT matchers: - type: word words: - "v=spf1" extractors: - type: regex regex: - "v=spf1(.+)" # digest: 4a0a00473045022100c805c45442f7831f6988bbd9c341175876a1b4794e4d567941b6665549dcc825022027d4142d81845a297952b15c97aaf2474f2a8bbca84e1c3835881c5fbd024706:922c64590222798bb761d5b6d8e72950