Skip to content

Commit

Permalink
Update aggregated metadata.
Browse files Browse the repository at this point in the history
  • Loading branch information
zeek-bot committed Mar 15, 2024
1 parent 5746281 commit bbb67ee
Showing 1 changed file with 11 additions and 7 deletions.
18 changes: 11 additions & 7 deletions aggregate.meta
Original file line number Diff line number Diff line change
Expand Up @@ -632,6 +632,17 @@ tags = TLS, SSL, JA3, Video conferencing, Video, Videoconferencing, Remote worki
version = master
url = https://github.com/corelight/got_zoom

[corelight/hassh]
depends =
zeek >=4.0.0
description = HASSH is used to identify specific Client and Server SSH implementations. The fingerprints can be stored, searched and shared in the form of an MD5 fingerprint. This package logs components to ssh.log
script_dir = scripts
summary = SSH client and server fingerprints.
tags = bro plugin, ssh, fingerprint, logging
test_command = cd testing && btest -c btest.cfg
version = v1.0.0
url = https://github.com/corelight/hassh

[corelight/http-stalling-detector]
description = Detect HTTP stalling attacks like slowloris.
script_dir = scripts
Expand Down Expand Up @@ -1965,13 +1976,6 @@ script_dir = scripts/Salesforce/GQUIC
url = https://github.com/salesforce/GQUIC_Protocol_Analyzer
version = master

[salesforce/hassh]
description = HASSH is used to identify specific Client and Server SSH implementations. The fingerprints can be stored, searched and shared in the form of an MD5 fingerprint. This package logs components to ssh.log
script_dir = zeek
tags = zeek plugin, ssh, fingerprint, logging
version = master
url = https://github.com/salesforce/hassh

[salesforce/ja3]
description = JA3 creates 32 character SSL client fingerprints and logs them as a field in ssl.log. These fingerprints can easily be shared as threat intelligence or used as correlation items for enhanced alerting and analysis. This package also adds JA3 to the Zeek Intel Framework.
https://github.com/salesforce/ja3
Expand Down

0 comments on commit bbb67ee

Please sign in to comment.