nfr
nfr copied to clipboard
Suricata TLS support
As per email let's get this together and submitting JA3 hashes from tls.json and HTTP requests from http.json material. NFR currently only supports DNS scoring for Suricata and we need to extend it.
Is this one complete? It's similar to https://github.com/alphasoc/nfr/issues/71.
HTTP support has been added since 1.7.0, but no TLS support yet.
HTTP support has been added since 1.7.0, but no TLS support yet.
Renamed the issue, and it's essentially the same as https://github.com/alphasoc/nfr/issues/72.