QR Code Link extraction Insight

sublime-security · Sep 29, 2023 · ff0a027 · ff0a027
1 parent f2ff815
commit ff0a027
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/insights/attachments/link_qr_code_attachment.yml b/insights/attachments/link_qr_code_attachment.yml
@@ -0,0 +1,7 @@
+name: "QR Code Link in attachment"
+type: "query"
+source: |
+  any(attachments,
+          (.file_type in $file_types_images or .file_type == "pdf")
+          and map(file.explode(.),
+             .scan.qr.url.url)