7 commits

Author	SHA1	Message	Date
Seth Hall	ebd064de17	Add some more DCE_RPC endpoints.	2016-08-05 12:29:45 -04:00
Seth Hall	d1b1a560c0	Add a DCE-RPC test.	2016-07-07 14:17:25 -04:00
Seth Hall	dcb8dee3eb	Small improvements to DCE/RPC handling. ... - Fix an issue with svcctl uuid -> operation mapping. - Add a heuristic to fill out the endpoint name in case the original dce/rpc binding wasn't seen. - Improve naming and code structure in the dce/rpc scripts.	2016-04-13 12:10:51 -04:00
Seth Hall	ff3437d157	Clean up and moving a few SMB2 commands out into their own files. ... I assume that the upcoming SMB lock thing might be something related to the SMB2 LOCK command...	2016-04-01 22:45:07 -04:00
Seth Hall	03d5b655af	Add epmapper operations to dce_rpc scripts.	2016-04-01 13:01:23 -04:00
Seth Hall	086519e851	Adding more dcerpc operations and fixing a bug with how log records are handled.	2016-04-01 10:16:02 -04:00
Seth Hall	5721db4be7	Lots of cleanup and improvement to DCE/RPC analyzer. ... - It works with DCE/RPC over SMB1+2 now. - Using named pipes in 1+2 and the transaction cmd in SMB1. - Base scripts based on work by Josh Liburdi. - New dce_rpc.log. Feedback on how to make this log more compact and useful would be appreciated.	2016-04-01 09:38:52 -04:00