base/bif/plugins/Zeek_NTLM.events.bif.zeek

GLOBAL

Namespace

GLOBAL

Summary

Events

ntlm_authenticate: event	Generated for NTLM messages of type authenticate.
ntlm_challenge: event	Generated for NTLM messages of type challenge.
ntlm_negotiate: event	Generated for NTLM messages of type negotiate.

Detailed Interface

Events

ntlm_authenticate

Type

event (c: connection, request: NTLM::Authenticate)

Generated for NTLM messages of type authenticate.

Parameters

• c – The connection.

• request – The parsed data of the NTLM message. See init-bare for more details.

See also: ntlm_negotiate, ntlm_challenge

ntlm_challenge

Type

event (c: connection, challenge: NTLM::Challenge)

Generated for NTLM messages of type challenge.

Parameters

• c – The connection.

• negotiate – The parsed data of the NTLM message. See init-bare for more details.

See also: ntlm_negotiate, ntlm_authenticate

ntlm_negotiate

Type

event (c: connection, negotiate: NTLM::Negotiate)

Generated for NTLM messages of type negotiate.

Parameters

• c – The connection.

• negotiate – The parsed data of the NTLM message. See init-bare for more details.

See also: ntlm_challenge, ntlm_authenticate