Mirror/zeek - git.uphillsecurity.com: We code.

Mirror/zeek

Fork 0

mirror of https://github.com/zeek/zeek.git synced 2025-10-06 16:48:19 +00:00

Commit graph

Author	SHA1	Message	Date
Seth Hall	ad66c9c4d9	Script cleanup. - Defaults for all built-in asset tracking changed to LOCAL_HOSTS - Added a tuning script for changing asset tracking to ALL_HOSTS in all of the core scripts that do asset tracking. - Default Notice::policy files notices instead of alarming on them. - Moved KnownHosts::Info back to export section because the log_known_hosts event can't be defined in the export section without it. - Moved the Malware Hash Registry detection out of the core HTTP protocol scripts and added it to the all.bro script.	2011-06-15 11:27:39 -04:00
Seth Hall	b8a1336088	Renaming a helper function for building regexes.	2011-05-24 14:45:16 -04:00
Seth Hall	31c7e56a14	New var and func: local_zones: set[string] and is_local_name(string): bool It can be used to discover if a DNS zone can be considered local with the is_local_name function.	2011-04-12 13:11:06 -04:00

Author

SHA1

Message

Date

Seth Hall

ad66c9c4d9

Script cleanup.

- Defaults for all built-in asset tracking changed to LOCAL_HOSTS
- Added a tuning script for changing asset tracking
  to ALL_HOSTS in all of the core scripts that do
  asset tracking.
- Default Notice::policy files notices instead of alarming on them.
- Moved KnownHosts::Info back to export section because
  the log_known_hosts event can't be defined in the
  export section without it.
- Moved the Malware Hash Registry detection out of
  the core HTTP protocol scripts and added it to the
  all.bro script.

2011-06-15 11:27:39 -04:00

Seth Hall

b8a1336088

Renaming a helper function for building regexes.

2011-05-24 14:45:16 -04:00

Seth Hall

31c7e56a14

New var and func: local_zones: set[string] and is_local_name(string): bool

It can be used to discover if a DNS zone can be considered local
with the is_local_name function.

2011-04-12 13:11:06 -04:00

3 commits