find_smbv1

https://github.com/klehigh/find_smbv1
1 2 3 0 Last Push 6/14/22, 6:47 PM

Zeek script to find SMBv1 activity.

Raises notices for now. Someday it will log the commands too.

Package Version :

Description :

find SMBv1 activity

Script Dir :

scripts

Depends :

bro >=2.5.0

Tags :

logging, smb

Package Checks : ☑

License: ☑
Info:
Found license 'LICENSE'
Readme: ☑
Info:
Found readme 'README.md'
Build Command: ☑
Bad Extension: ☑
Expensive Events: ☑
Unsafe Functions: ☑
Charset: ☑

Description :

find SMBv1 activity

Script Dir :

scripts

Depends :

bro >=2.5.0

Tags :

logging, smb

Package Checks : ☑

License: ☑
Info:
Found license 'LICENSE'
Readme: ☑
Info:
Found readme 'README.md'
Build Command: ☑
Bad Extension: ☑
Expensive Events: ☑
Unsafe Functions: ☑
Charset: ☑

Description :

find SMBv1 activity

Script Dir :

scripts

Depends :

zeek >=2.5.0

Tags :

logging, smb

Package Checks : ⌧

License: ☑
Info:
Found license 'LICENSE'
Readme: ☑
Info:
Found readme 'README.md'
Build Command: ☑
Bad Extension: ⌧
Errors:
Package loads files with incorrect extensions: find_smbv1/scripts/find_smbv1.zeek
Expensive Events: ☑
Unsafe Functions: ☑
Charset: ☑