mirror of
https://github.com/zeek/zeek.git
synced 2025-10-08 17:48:21 +00:00

- It works with DCE/RPC over SMB1+2 now. - Using named pipes in 1+2 and the transaction cmd in SMB1. - Base scripts based on work by Josh Liburdi. - New dce_rpc.log. Feedback on how to make this log more compact and useful would be appreciated.
5 lines
207 B
Text
5 lines
207 B
Text
# @TEST-EXEC: bro -b -C -r $TRACES/smb/dssetup_DsRoleGetPrimaryDomainInformation_standalone_workstation.cap %INPUT
|
|
# @TEST-EXEC: btest-diff dce_rpc.log
|
|
|
|
@load base/protocols/dce-rpc
|
|
@load base/protocols/smb
|