zeek/scripts/base/protocols/dce-rpc/__load__.bro at e70a528ad62c1ed1e4e442ce9f4c335a056c687d - Mirror/zeek - git.uphillsecurity.com: We code.

Mirror/zeek

mirror of https://github.com/zeek/zeek.git synced 2025-10-10 10:38:20 +00:00

Seth Hall 5721db4be7 Lots of cleanup and improvement to DCE/RPC analyzer.

- It works with DCE/RPC over SMB1+2 now.
   - Using named pipes in 1+2 and the transaction cmd in SMB1.
 - Base scripts based on work by Josh Liburdi.
 - New dce_rpc.log.  Feedback on how to make this log more compact
   and useful would be appreciated.

2016-04-01 09:38:52 -04:00

2 lines

28 B

Text

Raw Blame History

	`@load ./consts`
	`@load ./main`