detect more ICS device make/model/class

[mmguero]

It might be cool to look at grassmarlin's fingerprint database and see if there's anything there we could to do identify more kinds of ICS devices. At what point would this fingerprinting be done?

[mmguero]

Since this wouldn't really be a new "parser" per-se, I think using Zeek signatures could actually be a good way to detect these kind of fingerprints.

[mmguero]

So here's my cool idea: I'd like to see if it's feasible to take a python script that reads some selections from grassmarlin's fingerprint database and automatically translates them to zeek signatures. need to check OSS license compatibility, but I think where it's LGPL we'd be ok.

[mmguero]

Kamino closed and cloned this issue to idaholab/Malcolm