zrobinette12

JA4SSH in its own log.

5

Is there a reason behind the Zeek ssh.log not containing JA4SSH and having that data broken out into its own ja4ssh.log?

Adding &optional to zeek records question

1

Hello, was there a specific reason to not use `&optional` on several of the ja4 zeek records such as here? https://github.com/FoxIO-LLC/ja4/blob/main/zeek/ja4t/main.zeek#L42. When writing JSON logs, it ends up looking like...

I have a use-case from Zeek to extract SMTP DATA as a file (a.k.a EML file type). EML files are undecoded SMTP MIME DATA. My organization developed a plugin that...

Zeek version: 8.0.3 I have a custom file extraction plugin and have noticed that certain files over SMB (it may not be specific to SMB, however in my production environment,...