mirror of
https://github.com/activecm/rita
synced 2026-06-08 13:02:45 +00:00
Naomi Kramer
29 lines
6.6 KiB
Plaintext
29 lines
6.6 KiB
Plaintext
#separator \x09
|
|
#set_separator ,
|
|
#empty_field (empty)
|
|
#unset_field -
|
|
#path http
|
|
#open 2019-02-28-12-07-01
|
|
#fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p trans_depth method host uri referrer version user_agent request_body_len response_body_len status_code status_msg info_code info_msg tags username password proxied orig_fuids orig_filenames orig_mime_types resp_fuids resp_filenames resp_mime_types origin
|
|
#types time string addr port addr port count string string string string string string count count count string count string set[enum] string string set[string] vector[string] vector[string] vector[string] vector[string] vector[string] vector[string] string
|
|
1517336154.078555 CsDSTo3cGyb7sbxsj5 10.55.100.109 52068 52.44.164.170 80 1 GET www.alexa.com /topsites/category;2/Top/Business/ - 1.1 Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.16299.98 0 178 301 Moved Permanently - - (empty) - - - - - - FfN3lR2RQPdyjaiHo9 - text/html originzxyw
|
|
1517336162.615244 ClmlDRtRxVxeI68pc 10.55.100.109 52135 72.21.91.29 80 1 GET ocsp.digicert.com /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQQX6Z6gAidtSefNc6DC0OInqPHDQQUD4BhHIIxYdUvKOeNRji0LOHG2eICEA0xaNqvbgoWhaatVZDMkfU= - 1.1 Microsoft-CryptoAPI/10.0 0 471 200 OK 101 infoinfowow (empty) johnsmith123 password123 - - - - FXoOb7k8rzRYNzHJ4 - application/ocsp-response -
|
|
1517336162.680510 ClmlDRtRxVxeI68pc 10.55.100.109 52135 72.21.91.29 80 2 GET ocsp.digicert.com /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQQX6Z6gAidtSefNc6DC0OInqPHDQQUD4BhHIIxYdUvKOeNRji0LOHG2eICEA43oR3iLsJeAJczwVsnQCI= - 1.1 Microsoft-CryptoAPI/10.0 0 471 200 OK - - (empty) janedoe987 password987 - - - - FcUaPr28AJNXHOggG6 - application/ocsp-response -
|
|
1517336162.725153 CCWo4orreGs2jPNm6 10.55.100.109 52137 72.21.91.29 80 1 GET ocsp.digicert.com /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQQX6Z6gAidtSefNc6DC0OInqPHDQQUD4BhHIIxYdUvKOeNRji0LOHG2eICEA43oR3iLsJeAJczwVsnQCI= - 1.1 Microsoft-CryptoAPI/10.0 0 471 200 OK - - (empty) - - - - - - F3LsYm3leQvjXuzTu4 - application/ocsp-response -
|
|
1517336162.705568 CP4HnL1chY8ajVKasj 10.55.100.109 52136 72.21.91.29 80 1 GET ocsp.digicert.com /MFEwTzBNMEswSTAJBgUrDgMCGgUABBQQX6Z6gAidtSefNc6DC0OInqPHDQQUD4BhHIIxYdUvKOeNRji0LOHG2eICEA2PRHwc6RWDvxkHoMg08os= - 1.1 Microsoft-CryptoAPI/10.0 0 471 200 OK - - (empty) - - - - - - Ff3vY03uNgIMavws4h - application/ocsp-response -
|
|
1517336166.454364 CDoGYf1dVa4HCX9a7d 10.55.182.100 14307 23.52.162.184 80 1 GET cdn.content.prod.cms.msn.com /singletile/summary/alias/experiencebyname/today?market=en-US&source=appxmanifest&tenant=amp&vertical=news - 1.1 Microsoft-WNS/10.0 0 1104 200 OK - - (empty) - - - - - - FbIccf3JRcPTZ0Mhl2 - application/xml -
|
|
1517336166.536286 CIzSVB3v25UJ57J6i 10.55.182.100 14308 23.52.161.212 80 1 GET tile-service.weather.microsoft.com /en-US/livetile/preinstall?region=US&appid=C98EA5B0842DBB9405BBF071E1DA76512D21FE36&FORM=Threshold - 1.1 Microsoft-WNS/10.0 0 4291 200 OK - - (empty) - - - - - - FlBgnw2U3zpKDVBklf - application/xml -
|
|
1517336221.469213 CAOYWg3ubRCQ2d1Df 10.55.100.106 50351 52.44.164.170 80 1 GET www.alexa.com /topsites/category;3/Top/Business/ - 1.1 Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.16299.98 0 178 301 Moved Permanently - - (empty) - - - - - - FeN47s20eXPA8jFphf - text/html -
|
|
1517336221.471323 CLqFqD1rPXvGRgcJBl 10.55.100.110 55283 52.44.164.170 80 1 GET www.alexa.com /topsites/category;4/Top/Business/ - 1.1 Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.16299.98 0 178 301 Moved Permanently - - (empty) - - - - - - F2wLxg2gR8fBUFkri8 - text/html -
|
|
1517336221.475170 C20GGk4wslMWs3qNd3 10.55.100.107 58461 52.44.164.170 80 1 GET www.alexa.com /topsites/category;3/Top/Business/ - 1.1 Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.16299.98 0 178 301 Moved Permanently - - (empty) - - - - - - FfuHHp1KvATyPnPV0e - text/html -
|
|
1517336221.756997 Cen4LS1FNlGZloD6Th 10.55.100.111 49568 52.55.1.124 80 1 GET www.alexa.com /topsites/category;3/Top/Business/ - 1.1 Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.16299.98 0 178 301 Moved Permanently - - (empty) - - - - - - FxPh9T2JOYuqJEo8bb - text/html -
|
|
1517336222.044612 CV6FHE4E0vnxtx3ST3 10.55.100.100 50259 52.55.1.124 80 1 GET www.alexa.com /topsites/category;3/Top/Business/ - 1.1 Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.16299.98 0 178 301 Moved Permanently - - (empty) - - - - - - FGxHCF3N5IG7i1ccAl - text/html -
|
|
1517336222.042848 CKcU1qed3rZ6Ad9Q5 10.55.100.104 60433 52.44.164.170 80 1 GET www.alexa.com /topsites/category;0/Top/Business/ - 1.1 Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.16299.98 0 178 301 Moved Permanently - - (empty) - - - - - - FYdgTB3I4LyaNkRBMf - text/html -
|
|
1517336222.142139 CScNtt2ZPUfsvQow4d 10.55.100.108 53886 52.44.164.170 80 1 GET www.alexa.com /topsites/category;4/Top/Business/ - 1.1 Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.16299.98 0 178 301 Moved Permanently - - (empty) - - - - - - Fzi0YEThSYKoFpR36 - text/html -
|
|
1517336222.219879 CDps563r2YR5MB3TRd 10.55.100.103 51099 52.55.1.124 80 1 GET www.alexa.com /topsites/category;0/Top/Business/ - 1.1 Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.16299.98 0 178 301 Moved Permanently - - (empty) - - - - - - FhKu2m4icJt6oQxJSa - text/html -
|
|
1517336222.459335 CKgZnCz1yU1k2arch 10.55.100.105 57899 52.44.164.170 80 1 GET www.alexa.com /topsites/category;0/Top/Business/ - 1.1 Mozilla/5.0 (Windows NT; Windows NT 10.0; en-US) WindowsPowerShell/5.1.16299.98 0 178 301 Moved Permanently - - (empty) - - - - - - FeRCcD3TICWhVOEA88 - text/html -
|
|
1517336223.706379 Csvkb240tPgpudGbvd 10.55.100.110 55285 166.78.203.168 80 1 GET www.indeed.com / - 1.1 Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko 0 0 307 Temporary Redirect - - (empty) - - - - - - - - - -
|
|
1517336223.748540 C5kISW3XzUCPjRgD31 10.55.100.107 58465 72.21.91.29 80 1 GET ocsp.digicert.com /MFEwTzBNMEswSTAJBgUrDgMCGgUABBTfqhLjKLEJQZPin0KCzkdAQpVYowQUsT7DaQP4v0cB1JgmGggC72NkK8MCEAx5qUSwjBGVIJJhX+JrHYM= - 1.1 Microsoft-CryptoAPI/10.0 0 471 200 OK - - (empty) - - - - - - Fi2Ce32DTbOP7oyq6b - application/ocsp-response -
|
|
1517336223.875768 CUfZiQ2c73X6kBXPP8 10.55.100.100 50274 52.25.7.108 80 1 GET www.espn.com / - 1.1 Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko 0 317398 200 OK - - (empty) - - - - - - FKMs4V1KAuQcWka8A4 - text/html -
|
|
1517336224.102570 CTzf6V3PLeI6B9Fjt9 10.55.100.100 50268 23.52.161.186 80 1 GET cdn.optimizely.com /js/310987714.js http://www.espn.com/ 1.1 Mozilla/5.0 (Windows NT 10.0; WOW64; Trident/7.0; rv:11.0) like Gecko 0 0 304 Not Modified - - (empty) - - - - - - - - - -
|