mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 06:38:20 +00:00
![]() The aduser1-ntlm.pcap contains bindRequest messages using Microsoft AD specific Sicily Authentication [1]. Add the entries to the enum so we don't log undefined for these and also check the NTLMSSP signature. [1] https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-adts/8b9dbfb2-5b6a-497a-a533-7e709cb9a982 |
||
---|---|---|
.. | ||
krb.ldap.log | ||
krb.ldap_search.log | ||
ntlm.ldap.log | ||
ntlm.ldap_search.log |