Feature #2727: DCERPC UID to name mapping - Suricata - Open Information Security Foundation

Actions

Feature #2727

open

DCERPC UID to name mapping

Added by Eric Leblond almost 6 years ago. Updated over 4 years ago.

Status:

Assigned

Priority:

Low

Assignee:

Target version:

Effort:

low

Difficulty:

medium

Label:

Description

Microsoft is proposing a DCERPC UID to name mapping. It is used by Zeek to allow mapping of UID to human understandable names (see https://github.com/bro/bro/blob/master/scripts/base/protocols/dce-rpc/consts.bro).

We could integrate that into dcerpc output to get more user friendly events.

Actions

Also available in: Atom PDF