From ab4becc454b877d2eb79c80d860cf348b20d0538 Mon Sep 17 00:00:00 2001 From: jatkinosn Date: Thu, 6 Jun 2019 15:16:47 -0400 Subject: [PATCH] Adding comments specific to client security data in record definition. --- scripts/base/init-bare.zeek | 3 +++ 1 file changed, 3 insertions(+) diff --git a/scripts/base/init-bare.zeek b/scripts/base/init-bare.zeek index 144c02737f..b399c9b5bd 100644 --- a/scripts/base/init-bare.zeek +++ b/scripts/base/init-bare.zeek @@ -4276,8 +4276,11 @@ export { dig_product_id: string &optional; }; + ## The TS_UD_CS_SEC data block contains security-related information used to advertise client cryptographic support. type RDP::ClientSecurityData: record { + ## Cryptographic encryption methods supported by the client and used in conjunction with Standard RDP Security. encryption_methods: count; + ## Only used in French locale and designates the encryption method. If set then encryption methods should be set to 0. ext_encryption_methods: count; };