Project

General

Profile

Actions

Feature #2727

open

DCERPC UID to name mapping

Added by Eric Leblond almost 3 years ago. Updated over 1 year ago.

Status:
Assigned
Priority:
Low
Assignee:
Target version:
Effort:
low
Difficulty:
medium
Label:

Description

Microsoft is proposing a DCERPC UID to name mapping. It is used by Zeek to allow mapping of UID to human understandable names (see https://github.com/bro/bro/blob/master/scripts/base/protocols/dce-rpc/consts.bro).

We could integrate that into dcerpc output to get more user friendly events.

Actions #1

Updated by Eric Leblond almost 3 years ago

  • Assignee set to Eric Leblond
Actions #2

Updated by Victor Julien almost 3 years ago

  • Status changed from New to Assigned
  • Target version set to 5.0beta1
Actions #3

Updated by Victor Julien over 2 years ago

  • Priority changed from Normal to Low
Actions #4

Updated by Victor Julien over 2 years ago

  • Target version changed from 5.0beta1 to 70
Actions #5

Updated by Victor Julien about 2 years ago

  • Target version changed from 70 to TBD
Actions #6

Updated by Victor Julien over 1 year ago

  • Assignee changed from Eric Leblond to OISF Dev
Actions

Also available in: Atom PDF