zeek/scripts/base
Seth Hall a176e053ca Improve NTLM authentication logging.
If only one side of a connection was seen, the ntlm.log
would indicate that the authentication failed.  This has been
modified so that the success is listed as null since it's not
known whether or not the authentication was successful.

It can be inferred from continued SMB analysis though because
activity will continue taking place.  I changed it though
because the log shouldn't assume more than what it sees.
2016-04-13 12:26:07 -04:00
..
files Add missing documentation on the "Bro Package Index" page 2015-06-02 10:00:00 -05:00
frameworks Fix mime type identification for Windows LNK files. 2016-04-04 15:20:03 -04:00
misc BIT-1366: improve checksum offloading warning. 2015-04-02 10:12:39 -05:00
protocols Improve NTLM authentication logging. 2016-04-13 12:26:07 -04:00
utils Merge remote-tracking branch 'origin/topic/johanna/netcontrol' 2016-03-11 14:29:23 -08:00
init-bare.bro Fix a small bug with scriptland data types that led to a crash. 2016-04-04 15:07:01 -04:00
init-default.bro Merge remote-tracking branch 'origin/master' into topic/seth/smb 2016-04-13 01:57:07 -04:00