admin/activecm-rita
1
0
Fork 0
mirror of https://github.com/activecm/rita synced 2026-06-08 13:02:45 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
develop
activecm-rita/test_data/open_conns/open/open_ssl.log
T
Naomi Kramer 906f53b3e5 BEAM ME UP SCOTTY 
Co-Authored-By: Liza Tsibur <liza@activecountermeasures.com>
2024-06-28 00:28:25 -04:00

29 lines
8.6 KiB
Plaintext
Raw Permalink Blame History

#separator \x09
#set_separator ,
#empty_field (empty)
#unset_field -
#path ssl
#open 2019-02-28-12-07-01
#fields ts uid id.orig_h id.orig_p id.resp_h id.resp_p version cipher curve server_name resumed last_alert next_protocol established cert_chain_fuids client_cert_chain_fuids subject issuer client_subject client_issuer validation_status ja3 ja3s
#types time string addr port addr port string string string string bool string string bool vector[string] vector[string] string string string string string string string
1517336108.231879 CjlmYc3CNpKm4v8BTj 10.55.100.100 50255 13.78.179.199 443 TLSv12 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 x25519 array808-prod.do.dsp.mp.microsoft.com F - h2 T Fv7br62gosieiNvTsc,FAJqFQ24i41JphPjN5 (empty) CN=array801-prod.do.dsp.mp.microsoft.com CN=Microsoft IT TLS CA 4,OU=Microsoft IT,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US csubject cissuer ok bd0bf25947d4a37404f0424edf4db9ad 8415e777e0df6478fa9e17af0701002f
1517336108.614769 CYEMQ72xi1LMLs8oql 10.55.100.103 51095 13.78.184.186 443 TLSv12 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 x25519 array804-prod.do.dsp.mp.microsoft.com F - h2 T FuahL24bPTVHnd70g9,F9ck1wcrCzDuoQhQ (empty) CN=array801-prod.do.dsp.mp.microsoft.com CN=Microsoft IT TLS CA 4,OU=Microsoft IT,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US - - ok bd0bf25947d4a37404f0424edf4db9ad 8415e777e0df6478fa9e17af0701002f
1517336121.129435 CsKSMm15OTrmYVM4r9 10.55.100.111 49557 72.21.81.200 443 TLSv12 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 secp256r1 iecvlist.microsoft.com F - - T FZsLaxiraUcxvTtHb,FITtDa2vYriufScmmf,Fg5ki11A8efJb1vlQ7 (empty) CN=*.vo.msecnd.net CN=Microsoft IT TLS CA 5,OU=Microsoft IT,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US - - ok 0eecb7b1551fba4ec03851810d31743f 46e8c907c5cc3cf4b4420e76da5b4dba
1517336137.819118 C7wxEI2w1VfODbHO31 10.55.100.103 51096 13.78.186.254 443 TLSv12 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 x25519 array803-prod.do.dsp.mp.microsoft.com F - h2 T F2MbX135ie4ps7V4D9,FwJ91a2kT8SApQ6el7 (empty) CN=array801-prod.do.dsp.mp.microsoft.com CN=Microsoft IT TLS CA 4,OU=Microsoft IT,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US - - ok bd0bf25947d4a37404f0424edf4db9ad 8415e777e0df6478fa9e17af0701002f
1517336146.476143 CeAyPy1uTaPr8TCjTl 10.55.100.103 51097 64.4.54.254 443 TLSv12 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 secp256r1 v10.vortex-win.data.microsoft.com F - - T Ft8R9w2jK8065Nr8Yh,F7vzXZ1tPbmCQQQrH8 (empty) CN=*.vortex-win.data.microsoft.com,OU=Microsoft,O=Microsoft Corporation,L=Redmond,ST=WA,C=US CN=Microsoft Secure Server CA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US - - unable to get local issuer certificate bd0bf25947d4a37404f0424edf4db9ad d26ba888ffd53c3914cfbd00cf174690
1517336154.222757 CREW6U1jyERgWY3zSj 10.55.100.109 52069 52.44.164.170 443 TLSv10 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA secp256r1 www.alexa.com F - - T FSu1z230ps6hd68zG4,FdriHh3sQxU3ldBpm5,Fov8hz2km4TNZVqRQa,FHuY0f2mulJAZfoZhl (empty) CN=www.alexa.com CN=Amazon,OU=Server CA 1B,O=Amazon,C=US - - ok 54328bd36c14bd82ddaa0c04b25ed9ad 39f74f5618836d3c5f7dcccc9f67ba75
1517336155.940017 CmHW8n4JvMKFtSNDce 10.55.100.109 52070 98.138.252.39 443 TLSv12 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 secp256r1 www.yahoo.com F - h2 T F8Cifn42eKrzKYSKyl,FrxB4a2UBD7p3pjK9k (empty) CN=*.www.yahoo.com,O=Yahoo! Inc.,L=Sunnyvale,ST=CA,C=US CN=DigiCert SHA2 High Assurance Server CA,OU=www.digicert.com,O=DigiCert Inc,C=US - - ok 10ee8d30a5d01c042afd7b2b205facc4 76cc3e2d3028143b23ec18e27dbd7ca9
1517336155.938573 Cxy1cE8YcFdRF4FA8 10.55.100.109 52071 98.138.252.39 443 TLSv12 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 secp256r1 www.yahoo.com F - h2 T FllGC4GbK8qQLlWpb,FAUNf02vs5JOqDNXO1 (empty) CN=*.www.yahoo.com,O=Yahoo! Inc.,L=Sunnyvale,ST=CA,C=US CN=DigiCert SHA2 High Assurance Server CA,OU=www.digicert.com,O=DigiCert Inc,C=US - - ok 10ee8d30a5d01c042afd7b2b205facc4 76cc3e2d3028143b23ec18e27dbd7ca9
1517336156.481779 CVRSOV1odNSLB3grgj 10.55.100.109 52076 98.139.180.180 443 TLSv12 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 secp256r1 mbp.yimg.com F - h2 T FIhO1tPcQxk6jdl2,FVAamAhw3Uj7aV3Q (empty) CN=*.www.yahoo.com,O=Yahoo! Inc.,L=Sunnyvale,ST=CA,C=US CN=DigiCert SHA2 High Assurance Server CA,OU=www.digicert.com,O=DigiCert Inc,C=US - - ok 10ee8d30a5d01c042afd7b2b205facc4 76cc3e2d3028143b23ec18e27dbd7ca9
1517336156.482954 CmgX6M2RAetJ4KrVJg 10.55.100.109 52072 98.139.180.180 443 TLSv12 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 secp256r1 mbp.yimg.com F - h2 T FZoPuE1ijBjnCIj6ed,FP1FaW2Y91gnxIWw3 (empty) CN=*.www.yahoo.com,O=Yahoo! Inc.,L=Sunnyvale,ST=CA,C=US CN=DigiCert SHA2 High Assurance Server CA,OU=www.digicert.com,O=DigiCert Inc,C=US - - ok 10ee8d30a5d01c042afd7b2b205facc4 76cc3e2d3028143b23ec18e27dbd7ca9
1517336156.490124 CkmtUbYs0OsBM9rIb 10.55.100.109 52073 98.139.180.180 443 TLSv12 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 secp256r1 mbp.yimg.com F - h2 T FsRfRr15vK8vvjDDag,FXWBI7ueXoE1p7e0a (empty) CN=*.www.yahoo.com,O=Yahoo! Inc.,L=Sunnyvale,ST=CA,C=US CN=DigiCert SHA2 High Assurance Server CA,OU=www.digicert.com,O=DigiCert Inc,C=US - - ok 10ee8d30a5d01c042afd7b2b205facc4 76cc3e2d3028143b23ec18e27dbd7ca9
1517336156.490426 C9YbC33DIITRfjcKE2 10.55.100.109 52075 98.139.180.180 443 TLSv12 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 secp256r1 mbp.yimg.com F - h2 T FWAOzr44xk9iM2fUFe,Fe5oRY3zXBn6dNA9C3 (empty) CN=*.www.yahoo.com,O=Yahoo! Inc.,L=Sunnyvale,ST=CA,C=US CN=DigiCert SHA2 High Assurance Server CA,OU=www.digicert.com,O=DigiCert Inc,C=US - - ok 10ee8d30a5d01c042afd7b2b205facc4 76cc3e2d3028143b23ec18e27dbd7ca9
1517336156.504648 C3uGCg2PZiXv0EXmXe 10.55.100.109 52077 98.139.180.180 443 TLSv12 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 secp256r1 mbp.yimg.com F - h2 T FfCuV91GSjNaAzwEY2,FZ7cqC1yW3TlhtN6G6 (empty) CN=*.www.yahoo.com,O=Yahoo! Inc.,L=Sunnyvale,ST=CA,C=US CN=DigiCert SHA2 High Assurance Server CA,OU=www.digicert.com,O=DigiCert Inc,C=US - - ok 10ee8d30a5d01c042afd7b2b205facc4 76cc3e2d3028143b23ec18e27dbd7ca9
1517336156.493314 C2Xfq11LQij1b1EI73 10.55.100.109 52074 98.139.180.180 443 TLSv12 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 secp256r1 mbp.yimg.com F - h2 T FSMINiJHY0AnkvQ38,F6VFVz4f62CjYMgVe3 (empty) CN=*.www.yahoo.com,O=Yahoo! Inc.,L=Sunnyvale,ST=CA,C=US CN=DigiCert SHA2 High Assurance Server CA,OU=www.digicert.com,O=DigiCert Inc,C=US - - ok 10ee8d30a5d01c042afd7b2b205facc4 76cc3e2d3028143b23ec18e27dbd7ca9
1517336156.714003 Ct7qKm2MRtt6gZKJx9 10.55.100.109 52079 69.147.92.12 443 TLSv12 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 secp256r1 s.yimg.com F - h2 T FGAuv12vLKdXHa0hfk,FnxxQbsJBzfUD0344 (empty) CN=*.yahoo.com,O=Yahoo Holdings\\, Inc.,L=Sunnyvale,ST=CA,C=US CN=DigiCert SHA2 High Assurance Server CA,OU=www.digicert.com,O=DigiCert Inc,C=US - - ok 10ee8d30a5d01c042afd7b2b205facc4 76cc3e2d3028143b23ec18e27dbd7ca9
1517336156.709488 C6indR1SYa3x5uGt0e 10.55.100.109 52078 69.147.92.12 443 TLSv12 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 secp256r1 s.yimg.com F - h2 T Fx5k2fJu907wH0jx4,Fl0e0z1fXWmukELlwi (empty) CN=*.yahoo.com,O=Yahoo Holdings\\, Inc.,L=Sunnyvale,ST=CA,C=US CN=DigiCert SHA2 High Assurance Server CA,OU=www.digicert.com,O=DigiCert Inc,C=US - - ok 10ee8d30a5d01c042afd7b2b205facc4 76cc3e2d3028143b23ec18e27dbd7ca9
1517336156.720665 C8Wswu2EQOXCJBDfrk 10.55.100.109 52083 69.147.92.12 443 TLSv12 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 secp256r1 s.yimg.com F - h2 T FyvFko4rg3jzAx76Pb,FPZ3Aw44ddsS53TXE (empty) CN=*.yahoo.com,O=Yahoo Holdings\\, Inc.,L=Sunnyvale,ST=CA,C=US CN=DigiCert SHA2 High Assurance Server CA,OU=www.digicert.com,O=DigiCert Inc,C=US - - ok 10ee8d30a5d01c042afd7b2b205facc4 76cc3e2d3028143b23ec18e27dbd7ca9
1517336156.722675 C7267t8RFt8bkJkG8 10.55.100.109 52081 69.147.92.12 443 TLSv12 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 secp256r1 s.yimg.com F - h2 T F9kJ5e2dQzNUtQe871,FQThMkwtgXg7QUHB5 (empty) CN=*.yahoo.com,O=Yahoo Holdings\\, Inc.,L=Sunnyvale,ST=CA,C=US CN=DigiCert SHA2 High Assurance Server CA,OU=www.digicert.com,O=DigiCert Inc,C=US - - ok 10ee8d30a5d01c042afd7b2b205facc4 76cc3e2d3028143b23ec18e27dbd7ca9
1517336156.723970 C6B2hc3zcPFNpkYc96 10.55.100.109 52082 69.147.92.12 443 TLSv12 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 secp256r1 s.yimg.com F - h2 T FYUuugH5LeYpjM3l5,FzZgrU1sLjzwEDQ14c (empty) CN=*.yahoo.com,O=Yahoo Holdings\\, Inc.,L=Sunnyvale,ST=CA,C=US CN=DigiCert SHA2 High Assurance Server CA,OU=www.digicert.com,O=DigiCert Inc,C=US - - ok 10ee8d30a5d01c042afd7b2b205facc4 76cc3e2d3028143b23ec18e27dbd7ca9
1517336156.720547 CRl9g9k3QHZKZUaI9 10.55.100.109 52080 69.147.92.12 443 TLSv12 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 secp256r1 s.yimg.com F - h2 T FWT4rl3FsYj6fLi5j8,FL4NtY3yOhEzUqJP16 (empty) CN=*.yahoo.com,O=Yahoo Holdings\\, Inc.,L=Sunnyvale,ST=CA,C=US CN=DigiCert SHA2 High Assurance Server CA,OU=www.digicert.com,O=DigiCert Inc,C=US - - ok 10ee8d30a5d01c042afd7b2b205facc4 76cc3e2d3028143b23ec18e27dbd7ca9
Reference in New Issue View Git Blame Copy Permalink