Re: RDP protocol details
Justin Azoff <[email protected]>
| Newsgroups | gmane.comp.security.detection.bro |
|---|---|
| Message-ID | <CAPfnCuhQOdPedyOboMCSr7W2GfbHpChgyD2Xb=1nzq7oBkgY9w@mail.gmail.com> |
Does this help? https://github.com/zeek/zeek/blob/1e488d7ebe2c889b20333a4196512e069e34f630/scripts/base/init-bare.zeek#L4279-L4306 channels is a vector of RDP::ClientChannelDef On Wed, Jun 5, 2019 at 2:15 PM Neslog <[email protected]> wrote: > Hi I'm looking at RDP protocol and looking for some details. I'm looking > for encryption algorithms > and methods supported by the client. I believe it would be in the > following event but not sure where I pulled it from. > > event rdp_client_network_data(c: connection, channels: ClientChannelList) > > Appreciate any insights. > _______________________________________________ > Zeek mailing list > [email protected] > http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek -- Justin _______________________________________________ Zeek mailing list [email protected] http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek