zeek/scripts
Seth Hall bbedb73a45 Huge updates to the RDP analyzer from Josh Liburdi.
- More data pulled into scriptland.
  - Logs expanded with client screen resolution and desired color depth.
  - Values in UTF-16 on the wire are converted to UTF-8 before being
    sent to scriptland.
  - If the RDP turns into SSL records, we now pass data that appears
    to be SSL to the PIA analyzer.
  - If RDP uses native encryption with X.509 certs we pass those
    certs to the files framework and the base scripts pass them forward
    to the X.509 analyzer.
  - Lots of cleanup and adjustment to fit the documented protocol
    a bit better.
  - Cleaned up the DPD signatures.
  - Moved to flowunit instead of datagram.
  - Added tests.
2015-03-04 13:12:03 -05:00
..
base Huge updates to the RDP analyzer from Josh Liburdi. 2015-03-04 13:12:03 -05:00
broxygen More test updates. 2013-12-04 13:45:03 -08:00
policy Merge remote-tracking branch 'origin/topic/jsiwek/deprecation' 2015-01-30 14:37:05 -08:00
site Add very basic ocsp stapling support. 2014-04-24 12:37:34 -07:00
CMakeLists.txt Don't install test-all-policy.bro script as it's for testing only. 2011-10-12 12:42:12 -05:00
test-all-policy.bro Merge remote-tracking branch 'origin/topic/vladg/cryptoapi' 2014-11-26 12:20:05 -05:00