Commits

Branch selector

 master

User selector

All users

Datepicker

All time

Commit History

Commits on Sep 16, 2024

• Merge pull request #2 from corelight/topic/yacin/fix-btest

  Show description for 1209027
  ynadji

  authored
  1209027

  Copy full SHA for 1209027

• make notice $identifier track between big_endian and big_endian_specific

  ynadji

  committed
  9dd7e28

  Copy full SHA for 9dd7e28

Commits on May 17, 2022

• add LICENSE

  ynadji

  committed
  28a9727

  Copy full SHA for 28a9727

Commits on May 16, 2022

• add blog URL

  ynadji

  committed
  2a3a151

  Copy full SHA for 2a3a151

Commits on May 2, 2022

• readme updates

  ynadji

  committed
  dc39c4c

  Copy full SHA for dc39c4c

• update documentation and metadata

  ynadji

  committed
  1a5d79f

  Copy full SHA for 1a5d79f

Commits on Apr 28, 2022

• remove unused logging code

  ynadji

  committed
  76ca330

  Copy full SHA for 76ca330

Commits on Apr 27, 2022

• Check for sec_addr_len being 0

  ynadji

  committed
  c679fe8

  Copy full SHA for c679fe8

Commits on Apr 14, 2022

• more guards for reporter.log madness

  ynadji

  committed
  3b04fc2

  Copy full SHA for 3b04fc2

• remove opnums, just match on 5

  ynadji

  committed
  51b95e4

  Copy full SHA for 51b95e4

• guard mres

  ynadji

  committed
  35dff83

  Copy full SHA for 35dff83

• remove extraneous call to correct_frag_length

  ynadji

  committed
  f21077d

  Copy full SHA for f21077d

• explain correct_frag_length

  ynadji

  committed
  d806136

  Copy full SHA for d806136

• also use correct_Frag_length in dce_rpc_bind_ack

  ynadji

  committed
  15a8eae

  Copy full SHA for 15a8eae

• only log matches from dce_rpc_bind_ack_data so i can see what is going on

  ynadji

  committed
  263167f

  Copy full SHA for 263167f

• remove package template btests

  ynadji

  committed
  4f7e2c0

  Copy full SHA for 4f7e2c0

• say where it came from

  ynadji

  committed
  2431544

  Copy full SHA for 2431544

• remove more general regex

  ynadji

  committed
  28c8e32

  Copy full SHA for 28c8e32

• parse out frag_len and compare to reduce FPs

  ynadji

  committed
  cc88d63

  Copy full SHA for cc88d63

• add basic test

  ynadji

  committed
  7e9f76d

  Copy full SHA for 7e9f76d

• remove \pipe\lsass from regex because it does not appear in exploited response, need to hook to dce_rpc_message bc zeek does not handle malformed bind ACKs well

  ynadji

  committed
  7d3fdcf

  Copy full SHA for 7d3fdcf

• initial version; remove useless tests

  ynadji

  committed
  a4cee11

  Copy full SHA for a4cee11

• Initial commit.

  Show description for ab43e21
  ynadji

  committed
  ab43e21

  Copy full SHA for ab43e21