Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 14:48:21 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 2
zeek/scripts/base/protocols/ldap
History
Arne Welzel 07bf7f8b18 ldap: Add Sicily Authentication constants 
The aduser1-ntlm.pcap contains bindRequest messages using Microsoft AD
specific Sicily Authentication [1]. Add the entries to the enum so we
don't log undefined for these and also check the NTLMSSP signature.

[1] https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-adts/8b9dbfb2-5b6a-497a-a533-7e709cb9a982
2025-04-15 20:10:56 +02:00
..
__load__.zeek ldap: Add spicy-events.zeek 2023-10-19 10:48:34 +02:00
consts.zeek ldap: Implement extended request/response and StartTLS support 2024-07-23 11:29:00 +02:00
dpd.sig Move spicy-ldap into Zeek protocol analyzer tree 2023-10-10 09:21:57 +02:00
main.zeek ldap: Add Sicily Authentication constants 2025-04-15 20:10:56 +02:00
spicy-events.zeek ldap: Implement extended request/response and StartTLS support 2024-07-23 11:29:00 +02:00