zeek/scripts
jeff-bb dd2cdb064b
"Best Guess" unknown keyboard / language variants
If the lookup table does not have an entry, it will just log as the raw decimal language/keyboard code. With this change, if we do not have an entry in the lookup table, we'll look at the low order / 4 least significant bits to see if we have a match. The high order / 4 most significant bits are flags/modifiers to the base language/keyboard code. We'll append that it is a "Best Guess"

(This is my first attempt at Zeek scripting, apologies upfront if I'm missing obvious language features. I feel like the const language lookup should return a success/fail return code that we would key off of, but unsure how to accomplish that so instead went for string matching on value in == value out).
2023-01-19 16:55:23 -06:00
..
base "Best Guess" unknown keyboard / language variants 2023-01-19 16:55:23 -06:00
policy intel/seen/file-names: Use file_over_new_connection() 2023-01-10 10:10:28 +01:00
site Deprecate misc/scan.zeek 2022-08-23 09:10:53 +02:00
zeekygen mqtt: Move from policy/ into base/ 2022-11-30 10:14:20 +01:00
CMakeLists.txt Add base/misc/installation.zeek, with Zeek installation directories 2022-05-23 14:16:59 -07:00
test-all-policy.zeek mqtt: Move from policy/ into base/ 2022-11-30 10:14:20 +01:00