Project

General

Profile

Actions
Copy link

Feature #5413

open

DCERPC logging is not easy to use in analysis

Added by Eric Leblond 3 months ago.

Status:
In Progress
Priority:
Normal
Assignee:
Eric Leblond
Target version:
TBD
Effort:
Difficulty:
Label:

Description

The dcerpc part of smb events have the dcerpc uudi in one event and the opnum in another event. This is not convenient as a full understanding of the dcerpc request needs to be build upon 2 events.

Related issues 1 (1 open — 0 closed)

Related to Feature #4175: dcerpc: higher level loggingNewCommunity TicketActions
Actions
Copy link
 #1

Updated by Victor Julien 3 months ago

Actions
Copy link

Also available in: Atom PDF