Zeek 3.0 DNS, RDP and SMB Analyzer Changes
Michael Gez <[email protected]> Tue, 17 Sep 2019 10:18:37 -0400
| Newsgroups | gmane.comp.security.detection.bro |
|---|---|
| Message-ID | <CALuqTtVhO9yTGhqgg5_+eaWY+1nGjXHfAcRQyFjOXn=u2oan7g@mail.gmail.com> |
Hi all, Could anyone provide more information about the changes being made to DNS, RDP and SMB analyzers in the shift to Zeek 3.0? Are there new fields being added? If anyone has tried it out and has any insight it would be appreciated. I won't get a chance to test 3.0 out myself for a few weeks, so I'm hoping to have an idea of what to expect when making the switch. Any information would be greatly appreciated, Thanks! _______________________________________________ Zeek mailing list [email protected] http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek