Comments (3)
duzvik
commented on June 16, 2024
1
It makes sense. I understand. Thank you.
from watchad.
Qianlitp
commented on June 16, 2024
Yes, packetbeat does not support the kerberos protocol.
I developed a module to parse the kerberos protocol by reference to gokrb5 and added it to packetbeat.
But it is not currently in this project, I will consider open source in the future.
from watchad.
duzvik
commented on June 16, 2024
Does your kerberos module parse packets and send to logstash for future analysis following message types:
11: KRB_AS_REP
12: KRB_TGS_REQ
13: KRB_TGS_REP
14: KRB_AP_REQ
32: KRB_AP_ERR_TKT_EXPIRED
from watchad.
Related Issues (20)
- 使用SAMR查询敏感用户 有缺陷 HOT 2
- 通过思科VPN接入有几率触发MS17010告警
- 一套WatchAD是否支持多个域控日志的接入？ HOT 3
- WatchAD安装的虚拟机换了IP之后，WEB页面提示查询出错 HOT 2
- ad版本是windows2016 在es上也有index，前端也自动识别到各dc信息，但是在前端查询不到任何日志信息，请问如何排查，哪里查看日志？ HOT 2
- 请问krb5的日志来自哪里?也是来自winlogbeat吗 HOT 1
- 遇到ldap3的报错
- start.py这个脚本是不是有问题啊？？ HOT 2
- 所有组件都正常启动，web也能启动。但无法收到任何日志
- 部署成功，但是没有日志看到，请问怎么排查？
- 这个产品是不是不再更新了 HOT 1
- 運行docker-compose up 報錯，請問怎麼處理
- Kerberos流量分析功能还会继续开源吗 HOT 1
- adidns spoof 攻击场景检测
- ldap3.core.exceptions.LDAPBindError: automatic bind not successful - invalidCredentials HOT 4
- 只有dc_log日志，没有user_activity日志，WatchAD无告警 HOT 6
- 启动成功了，但是查看python3 watch.py查看状态时FATAL
- 初始化安装watchad.py时候报错 HOT 1
- Kerberos流量分析功能还会继续开源
- 使用elasticsearch8.x 运行watchad.py 时提示put template出错 该怎么解决？
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from watchad.