From d4c4c0ae431189aaded517fa964a9ba060b2ea8f Mon Sep 17 00:00:00 2001 From: delorean Date: Fri, 16 Feb 2024 17:51:44 -0600 Subject: [PATCH] updated TTLs --- common/ref.go | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) diff --git a/common/ref.go b/common/ref.go index f527293..215fd69 100644 --- a/common/ref.go +++ b/common/ref.go @@ -9,18 +9,18 @@ var Domains = map[string]DomInfo{ // Microsoft Defender for Endpoint //https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/configure-network-connections-microsoft-defender-antivirus?view=o365-worldwide#services-and-urls "ussus2westprod.blob.core.windows.net": DomInfo{Vendor: "Microsoft Defender for Endpoint", TTL: 60}, - "download.microsoft.com": DomInfo{Vendor: "Microsoft Defender for Endpoint", TTL: 3588}, - "go.microsoft.com": DomInfo{Vendor: "Microsoft Defender for Endpoint", TTL: 1228}, + "download.microsoft.com": DomInfo{Vendor: "Microsoft Defender for Endpoint", TTL: 3600}, // dynamic + "go.microsoft.com": DomInfo{Vendor: "Microsoft Defender for Endpoint", TTL: 1600}, // dynamic "ussus1westprod.blob.core.windows.net": DomInfo{Vendor: "Microsoft Defender for Endpoint", TTL: 60}, "wsus2westprod.blob.core.windows.net": DomInfo{Vendor: "Microsoft Defender for Endpoint", TTL: 60}, - "security.microsoft.com": DomInfo{Vendor: "Microsoft Defender for Endpoint", TTL: 3589}, + "security.microsoft.com": DomInfo{Vendor: "Microsoft Defender for Endpoint", TTL: 3600}, "wseu1northprod.blob.core.windows.net": DomInfo{Vendor: "Microsoft Defender for Endpoint", TTL: 60}, "wsus2eastprod.blob.core.windows.net": DomInfo{Vendor: "Microsoft Defender for Endpoint", TTL: 60}, "ussus3westprod.blob.core.windows.net": DomInfo{Vendor: "Microsoft Defender for Endpoint", TTL: 60}, "wsus1eastprod.blob.core.windows.net": DomInfo{Vendor: "Microsoft Defender for Endpoint", TTL: 60}, "wsuk1westprod.blob.core.windows.net": DomInfo{Vendor: "Microsoft Defender for Endpoint", TTL: 60}, "ussus2eastprod.blob.core.windows.net": DomInfo{Vendor: "Microsoft Defender for Endpoint", TTL: 60}, - "settings-win.data.microsoft.com": DomInfo{Vendor: "Microsoft Defender for Endpoint", TTL: 2629}, + "settings-win.data.microsoft.com": DomInfo{Vendor: "Microsoft Defender for Endpoint", TTL: 3600}, // dynamic "usseu1northprod.blob.core.windows.net": DomInfo{Vendor: "Microsoft Defender for Endpoint", TTL: 60}, "wsus1westprod.blob.core.windows.net": DomInfo{Vendor: "Microsoft Defender for Endpoint", TTL: 60}, "usseu1westprod.blob.core.windows.net": DomInfo{Vendor: "Microsoft Defender for Endpoint", TTL: 60}, @@ -101,10 +101,10 @@ var Domains = map[string]DomInfo{ "threat-emulation.checkpoint.com": DomInfo{Vendor: "CheckPoint Harmony", TTL: 1800}, "epmgmt.checkpoint.com": DomInfo{Vendor: "CheckPoint Harmony", TTL: 900}, "sc1.checkpoint.com": DomInfo{Vendor: "CheckPoint Harmony", TTL: 1800}, - "gwevents.checkpoint.com": DomInfo{Vendor: "CheckPoint Harmony", TTL: 193}, - "gwevents.us.checkpoint.com": DomInfo{Vendor: "CheckPoint Harmony", TTL: 193}, + "gwevents.checkpoint.com": DomInfo{Vendor: "CheckPoint Harmony", TTL: 1800}, + "gwevents.us.checkpoint.com": DomInfo{Vendor: "CheckPoint Harmony", TTL: 180}, "endpoint-cdn.epmgmt.checkpoint.com": DomInfo{Vendor: "CheckPoint Harmony", TTL: 300}, - "checkpoint.com": DomInfo{Vendor: "CheckPoint Harmony", TTL: 32}, + "checkpoint.com": DomInfo{Vendor: "CheckPoint Harmony", TTL: 39}, "iaas.checkpoint.com": DomInfo{Vendor: "CheckPoint Harmony", TTL: 900}, "kav8.checkpoint.com": DomInfo{Vendor: "CheckPoint Harmony", TTL: 1800}, "cloudinfra-gw.portal.checkpoint.com": DomInfo{Vendor: "CheckPoint Harmony", TTL: 60}, @@ -241,7 +241,7 @@ var Domains = map[string]DomInfo{ "stnd-avpg.crsi.symantec.com": DomInfo{Vendor: "Symantec", TTL: 3600}, "shasta-rrs.symantec.com": DomInfo{Vendor: "Symantec", TTL: 3600}, "remotetunnel4.edrc.symantec.com": DomInfo{Vendor: "Symantec", TTL: 600}, - "liveupdate.symantec.com": DomInfo{Vendor: "Symantec", TTL: 3135}, + "liveupdate.symantec.com": DomInfo{Vendor: "Symantec", TTL: 3600}, "sso1.edrc.symantec.com": DomInfo{Vendor: "Symantec", TTL: 600}, "shasta-mrs.symantec.com": DomInfo{Vendor: "Symantec", TTL: 3600}, "telemetry.broadcom.com": DomInfo{Vendor: "Symantec", TTL: 3600}, @@ -288,7 +288,7 @@ var Domains = map[string]DomInfo{ "trendmicro.com": DomInfo{Vendor: "Trend Micro", TTL: 1800}, "api.jp.nacloud.trendmicro.com": DomInfo{Vendor: "Trend Micro", TTL: 60}, "api.eu.nacloud.trendmicro.com": DomInfo{Vendor: "Trend Micro", TTL: 60}, - "docs.trendmicro.com": DomInfo{Vendor: "Trend Micro", TTL: 1799}, + "docs.trendmicro.com": DomInfo{Vendor: "Trend Micro", TTL: 1800}, "api.us.nacloud.trendmicro.com": DomInfo{Vendor: "Trend Micro", TTL: 60}, "ddd53-threatconnect.trendmicro.com": DomInfo{Vendor: "Trend Micro", TTL: 1800}, "licenseupdate.trendmicro.com": DomInfo{Vendor: "Trend Micro", TTL: 1800},