4 commits

Author	SHA1	Message	Date
Jon Siwek	8b29df96cc	Merge branch 'master' of https://github.com/hosom/zeek ... * 'master' of https://github.com/hosom/zeek: Normalize the intel seen filename for smb. load smb-filenames in scripts/policy/frameworks/intel/seen/__load__.bro Add SMB::IN_FILE_NAME to Intel::Where enum Support filenamess for SMB files I added a test case	2019-03-25 16:45:59 -07:00
Stephen Hosom	1d5eac4ee1	Normalize the intel seen filename for smb.	2019-02-27 09:24:52 -05:00
Stephen Hosom	8ce6d67acc	Add SMB::IN_FILE_NAME to Intel::Where enum ... This should reduce the ambiguity of where precisely the indicator was seen so that it isn't confused with the normal File::IN_NAME hit.	2019-02-27 08:53:52 -05:00
Stephen Hosom	4ae92161e9	Support filenamess for SMB files ... Hook file_new to observe filenames in SMB traffic and fire into Intel::seen	2019-02-27 08:47:53 -05:00