USArmyResearchLab / Dshell

Dshell is a network forensic analysis framework.
Other
5.44k stars 1.14k forks source link

Plugin to extract useful information from TLS Handshakes (resub2) #128

Closed amm3 closed 3 years ago

amm3 commented 3 years ago

Resubmitting from a cleaned up branch. This module extracts useful information TLS handshakes, with support for:

Verbose details are included in the kwargs and most useful using jsonout.

I added a detection mechanism to fail gracefully when missing pyja3.

dev195 commented 3 years ago

Okay, looks good. Thanks for the submission!