nfr icon indicating copy to clipboard operation
nfr copied to clipboard

Suricata TLS support

Open chrisforce1 opened this issue 6 years ago • 3 comments

As per email let's get this together and submitting JA3 hashes from tls.json and HTTP requests from http.json material. NFR currently only supports DNS scoring for Suricata and we need to extend it.

chrisforce1 avatar Jan 18 '19 22:01 chrisforce1

Is this one complete? It's similar to https://github.com/alphasoc/nfr/issues/71.

chrisforce1 avatar May 02 '19 22:05 chrisforce1

HTTP support has been added since 1.7.0, but no TLS support yet.

tg avatar May 06 '19 10:05 tg

HTTP support has been added since 1.7.0, but no TLS support yet.

Renamed the issue, and it's essentially the same as https://github.com/alphasoc/nfr/issues/72.

chrisforce1 avatar May 19 '19 03:05 chrisforce1