21
edits
Incidents: Difference between revisions
m
no edit summary
(add missing attributes) |
mNo edit summary |
||
| Line 262: | Line 262: | ||
|- | |- | ||
|SMB: SMB1 negotiation<br> | |SMB: SMB1 negotiation<br> | ||
(smb_v1_negotiation) | (smb_version_negotiation, | ||
prior to 4.3: <s>smb_v1_negotiation</s>) | |||
|This trigger is executed at the beginning of each SMB connection and checks whether insecure SMB1 has been negotiated (until firmware 4.3). | |This trigger is executed at the beginning of each SMB connection and checks whether insecure SMB1 has been negotiated (until firmware 4.3). | ||
| | | | ||
| Line 282: | Line 284: | ||
(tls_handshake, | (tls_handshake, | ||
<s>ssl_handshake</s>) | prior to 4.4: <s>ssl_handshake</s>) | ||
|This trigger is checked during handshake of each TLS connection. | |This trigger is checked during handshake of each TLS connection. | ||
|certificate_expires, tls_alert_level | |certificate_expires, tls_alert_level | ||
| Line 288: | Line 290: | ||
|- | |- | ||
|TLS: TLS Handshake Server Hello | |TLS: TLS Handshake Server Hello | ||
(tls_handshake_server_hello, <s>tls_version</s>) | (tls_handshake_server_hello, | ||
prior to 4.4: <s>tls_version</s>) | |||
|This trigger is checked when receiving the Server Hello message of each TLS connection. | |This trigger is checked when receiving the Server Hello message of each TLS connection. | ||
|used_tls_version, tls_handshake_time_ms | |used_tls_version, tls_handshake_time_ms | ||