Project

General

Profile

Feature #2727

DCERPC UID to name mapping

Added by Eric Leblond 3 months ago. Updated 2 months ago.

Status:
Assigned
Priority:
Normal
Assignee:
Target version:
Effort:
low
Difficulty:
medium

Description

Microsoft is proposing a DCERPC UID to name mapping. It is used by Zeek to allow mapping of UID to human understandable names (see https://github.com/bro/bro/blob/master/scripts/base/protocols/dce-rpc/consts.bro).

We could integrate that into dcerpc output to get more user friendly events.

History

#1

Updated by Eric Leblond 3 months ago

  • Assignee set to Eric Leblond
#2

Updated by Victor Julien 2 months ago

  • Status changed from New to Assigned
  • Target version set to 5.0beta1

Also available in: Atom PDF