mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 14:48:21 +00:00
![]() This signature is relevant for process dumps on Windows that could be extracted by various tools. The unencrypted transmission of the dump of a critical system process (for example, lsass.exe) via network would be detected by this rule. |
||
---|---|---|
.. | ||
files | ||
frameworks | ||
misc | ||
protocols | ||
utils | ||
init-bare.zeek | ||
init-default.zeek | ||
init-frameworks-and-bifs.zeek |