zeek/scripts/base
Seth Hall f45e057779 Another big RDP update.
- New fields for certificate type, number of certificates,
   if certificates are permanent on the server, and the selected
   security protocol.
 - Fixed some issues with X.509 certificate handling over RDP
   (the event handler wasn't sufficiently constrained).
 - Better detection of and transition into encrypted mode.  No more
   binpac parse failures from the test traces anymore!
 - Some event name clean up and new events.
 - X.509 Certificate chains are now handled correctly (was only grabbing
   a single certificate).
2015-03-05 01:15:12 -05:00
..
files Deprecate split* family of BIFs. 2015-01-21 15:34:42 -06:00
frameworks Merge remote-tracking branch 'origin/topic/jsiwek/broker' 2015-03-02 17:10:15 -08:00
misc Add script to detect filtered TCP traces, addresses BIT-1119. 2014-01-31 17:04:58 -06:00
protocols Another big RDP update. 2015-03-05 01:15:12 -05:00
utils Deprecate split* family of BIFs. 2015-01-21 15:34:42 -06:00
init-bare.bro Merge remote-tracking branch 'origin/master' into topic/seth/rdp 2015-03-04 13:12:45 -05:00
init-default.bro Update init-default.bro 2015-02-14 13:31:23 -08:00