mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 06:38:20 +00:00
64ab1bbd47
In the past I thought that this is not super interesting. However, it turns out that this can actually contain a slew of interresting information - like operating systems querying for the revocation of software signing certificates, e.g. So - let's just enable this as a default log for the future.
4 lines
63 B
Text
4 lines
63 B
Text
@load ./main
|
|
@load ./certificate-event-cache
|
|
|
|
@load ./log-ocsp
|