mirror of
https://github.com/zeek/zeek.git
synced 2025-10-04 07:38:19 +00:00
![]() The aduser1-ntlm.pcap contains bindRequest messages using Microsoft AD specific Sicily Authentication [1]. Add the entries to the enum so we don't log undefined for these and also check the NTLMSSP signature. [1] https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-adts/8b9dbfb2-5b6a-497a-a533-7e709cb9a982 |
||
---|---|---|
.. | ||
files | ||
frameworks | ||
misc | ||
packet-protocols | ||
protocols | ||
utils | ||
init-bare.zeek | ||
init-default.zeek | ||
init-frameworks-and-bifs.zeek | ||
init-supervisor.zeek |