zeek/scripts/base
Seth Hall ee3e885712 Lots of fixes for file type identification.
- Plain text now identified with BOMs for UTF8,16,32
   (even though 16 and 32 wouldn't get identified as plain text, oh-well)
 - X.509 certificates are now populating files.log with
   the mime type application/pkix-cert.
 - File signatures are split apart into file types
   to help group and organize signatures a bit better.
 - Normalized some FILE_ANALYSIS debug messages.
 - Improved Javascript detection.
 - Improved HTML detection.
 - Removed a bunch of bad signatures.
 - Merged a bunch of signatures that ultimately detected
   the same mime type.
 - Added detection for MS LNK files.
 - Added detection for cross-domain-policy XML files.
 - Added detection for SOAP envelopes.
2015-03-13 22:14:44 -04:00
..
files Lots of fixes for file type identification. 2015-03-13 22:14:44 -04:00
frameworks Lots of fixes for file type identification. 2015-03-13 22:14:44 -04:00
misc Add script to detect filtered TCP traces, addresses BIT-1119. 2014-01-31 17:04:58 -06:00
protocols add local_resp to Conn Info 2015-02-18 20:41:40 -05:00
utils Deprecate split* family of BIFs. 2015-01-21 15:34:42 -06:00
init-bare.bro Rename comm/ directories to broker/ 2015-03-05 17:02:25 -06:00
init-default.bro MySQL analyzer 2014-07-24 15:52:42 -04:00