Vlad Grigorescu
|
d0e4d17f31
|
Tweak the PE OS versions based on real-world traffic.
|
2015-04-20 12:49:42 -04:00 |
|
Vlad Grigorescu
|
928f870f58
|
Update pe/main.bro to user register_for_mime_types, ensuring it will also work with the upcoming Files framework changes.
|
2015-04-20 11:54:34 -04:00 |
|
Vlad Grigorescu
|
e3d63bfee8
|
A bit of final script cleanup.
|
2015-04-19 21:38:34 -04:00 |
|
Vlad Grigorescu
|
71230fec81
|
Update baselines.
|
2015-04-19 21:16:35 -04:00 |
|
Vlad Grigorescu
|
d4bd5672c0
|
Documentation and a bit of overall cleanup.
|
2015-04-19 20:21:49 -04:00 |
|
Vlad Grigorescu
|
a2eff14e05
|
Add data about which tables are present.
|
2015-04-19 18:41:32 -04:00 |
|
Vlad Grigorescu
|
ea36686524
|
Remove the .idata parsing, as it can be more complicated in some cases.
|
2015-04-19 18:15:21 -04:00 |
|
Vlad Grigorescu
|
81bafb6c36
|
PE: Rehash the log a bit.
|
2015-04-16 22:56:47 -04:00 |
|
Vlad Grigorescu
|
fa7946ae7d
|
Checkpoint - Import Address Table being parsed.
|
2015-04-13 16:34:18 -05:00 |
|
Vlad Grigorescu
|
b4498a4142
|
Some changes to fix PE analyzer on master.
|
2015-04-07 14:45:15 -07:00 |
|
Vlad Grigorescu
|
d98b5b88b5
|
Parse PE section headers.
|
2014-06-22 07:18:12 -04:00 |
|
Vlad Grigorescu
|
8ffa81f390
|
Updated PE analyzer to work with changes in master.
|
2014-06-21 13:30:14 -04:00 |
|
Seth Hall
|
7ba51786e5
|
In progress checkpoint. Things are starting to work.
|
2013-07-27 08:10:08 -04:00 |
|