Updates to https://github.com/zeek/zeek/blob/master/scripts/base/protocols/dce-rpc/consts.zeek #3133
Closed
IAMUSConsulting
started this conversation in
Ideas
Updates to https://github.com/zeek/zeek/blob/master/scripts/base/protocols/dce-rpc/consts.zeek
#3133
Replies: 1 comment
-
|
Thanks for the update. I opened a PR that includes them (#3134). As an FYI, in the future it'll be easier to handle these things as either issues or PRs instead of discussions. We try to use discussions for longer topics that need some back-and-forth before work happens on htem. |
Beta Was this translation helpful? Give feedback.
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
-
module DCE_RPC;
export {
const uuid_endpoint_map: table[string] of string = {
["367abb81-9844-35f1-ad32-98f038001003"] = "svcctl",
["86d35949-83c9-4044-b424-db363231fd0c"] = "ITaskSchedulerService",
["378e52b0-c0a9-11cf-822d-00aa0051e40f"] = "sasec",
["1ff70682-0a51-30e8-076d-740be8cee98b"] = "atsvc",
["0a74ef1c-41a4-4e06-83ae-dc74fb1cdd53"] = "idletask",
["906b0ce0-c70b-1067-b317-00dd010662da"] = "IXnRemote",
["ae33069b-a2a8-46ee-a235-ddfd339be281"] = "IRPCRemoteObject",
["0b6edbfa-4a24-4fc6-8a23-942b1eca65d1"] = "IRPCAsyncNotify",
["afa8bd80-7d8a-11c9-bef4-08002b102989"] = "mgmt",
["f5cc59b4-4264-101a-8c59-08002b2f8426"] = "FrsRpc",
["000001a0-0000-0000-c000-000000000046"] = "IRemoteSCMActivator",
["00000143-0000-0000-c000-000000000046"] = "IRemUnknown2",
["12345778-1234-abcd-ef00-0123456789ab"] = "lsarpc",
["76f03f96-cdfd-44fc-a22c-64950a001209"] = "IRemoteWinspool",
["12345678-1234-abcd-ef00-01234567cffb"] = "netlogon",
["e3514235-4b06-11d1-ab04-00c04fc2dcd2"] = "drsuapi",
["5261574a-4572-206e-b268-6b199213b4e4"] = "AsyncEMSMDB",
["4d9f4ab8-7d1c-11cf-861e-0020af6e7c57"] = "IActivation",
["99fcfec4-5260-101b-bbcb-00aa0021347a"] = "IObjectExporter",
["e1af8308-5d1f-11c9-91a4-08002b14a0fa"] = "epmapper",
["12345778-1234-abcd-ef00-0123456789ac"] = "samr",
["4b324fc8-1670-01d3-1278-5a47bf6ee188"] = "srvsvc",
["45f52c28-7f9f-101a-b52b-08002b2efabe"] = "winspipe",
["6bffd098-a112-3610-9833-46c3f87e345a"] = "wkssvc",
["3919286a-b10c-11d0-9ba8-00c04fd92ef5"] = "dssetup",
["12345678-1234-abcd-ef00-0123456789ab"] = "spoolss",
}
Beta Was this translation helpful? Give feedback.
All reactions