Data Source: Bro x509

Date: 2025-01-23

ID: e8792367-64b0-47e9-b923-6764b0f7e936

Author: Jacob Delgado, SnapAttack

Description

Logs details about X.509 certificates observed in network traffic captured by Zeek (formerly Bro), including certificate fields, validity periods, and issuers.

Details

Property	Value
Source	`bro:x509:json`
Sourcetype	`bro:x509:json`

Supported Apps

TA for Zeek (version 1.0.8)

Source: GitHub | Version: 2