Project

General

Profile

Actions
Copy link

Feature #5670

open

Support wide strings somehow

Added by Philippe Antoine 11 months ago. Updated 11 months ago.

Status:
New
Priority:
Normal
Assignee:
OISF Dev
Target version:
TBD
Effort:
Difficulty:
Label:

Description

When something is UTF-16 encoded, the interesting thing is often like S\x00E\x00L\x00E\x00C\x00T which is not conveniently expressed in Suricata

Related issues 1 (1 open — 0 closed)

Related to Suricata - Task #5488: Suricon 2022 brainstormAssignedVictor JulienActions
Actions
Copy link
 #1

Updated by Philippe Antoine 11 months ago

  • Related to Task #5488: Suricon 2022 brainstorm added
Actions
Copy link
 #3

Updated by Philippe Antoine 11 months ago

Maybe like nocase keyword ? Maybe like a transform ?

Actions
Copy link

Also available in: Atom PDF