zeek-outbound-known-services-with-origflag

https://github.com/esnet-security/zeek-outbound-known-services-with-origflag
4 2 0 0 Last Push 11/22/22, 9:05 PM

Zeek Known Services With OrigFlag for outbound services Extension of Zeek's known-services.zeek to include is_local_orig flag for outbound detected services.

Package Version :

Description :

This script expands the base known-services policy to include is_local_orig flag to indicate if an outbound service was discovered from non-local nets (is_local_orig =F) or from local nets (is_local_orig=T).

Script Dir :

scripts

Test Command :

cd tests && btest -d known_tests

Tags :

known-services, known_services