Open Information Security Foundation

03/20/2025

09:22 PM Suricata Feature #7592 (Closed): mime: add email.from keyword

Alice da Silva Akaki

09:22 PM Suricata Feature #7592: mime: add email.from keyword

merged: https://github.com/OISF/suricata/pull/12787 Alice da Silva Akaki

03/18/2025

05:45 PM Suricata Feature #7592 (In Progress): mime: add email.from keyword

https://github.com/OISF/suricata-verify/pull/2349 Alice da Silva Akaki

03/12/2025

03:00 AM Suricata Feature #7532 (Closed): detect/ldap: add keywords for LDAPResult

merged: https://github.com/OISF/suricata/pull/12709 Alice da Silva Akaki

03/03/2025

09:17 PM Suricata Feature #7533 (In Review): detect/ldap: add ldap.request.attribute_type and ldap.request.attribute keywords, and same for responses

https://github.com/OISF/suricata/pull/12708 Alice da Silva Akaki

02/14/2025

10:25 PM Suricata Bug #7552: applayer: misdetection if response is seen first without request

S-V tests that indicate the bug
https://github.com/OISF/suricata-verify/pull/2292 Alice da Silva Akaki

02/13/2025

02:31 PM Suricata Bug #7552 (Closed): applayer: misdetection if response is seen first without request

Transaction gets cleaned by AppLayerParserTransactionsCleanup before detection is run in the to_client direction when... Alice da Silva Akaki

02/12/2025

03:17 PM Suricata Feature #7513 (Closed): detect/integers: add support for negated strings when enum is used

Merged:
SU: https://github.com/OISF/suricata/pull/12516
SV: https://github.com/OISF/suricata-verify/pull/2271 Alice da Silva Akaki

02/11/2025

09:06 AM Suricata Feature #7532 (In Progress): detect/ldap: add keywords for LDAPResult

PRs for review:
SU: https://github.com/OISF/suricata/pull/12555
SV: https://github.com/OISF/suricata-verify/pull/2282 Alice da Silva Akaki

02/03/2025

08:04 PM Suricata Feature #7532: detect/ldap: add keywords for LDAPResult

Philippe Antoine wrote in #note-3:
> There is no ldap.request.result_code it is only in responses right ?
yes, it... Alice da Silva Akaki