Merge pull request #5413 from lingtren/master

Add template to detect SSL Issuer
2022-09-21 00:08:54 +05:30 · 2022-09-21 00:08:54 +05:30 · 7beacfc6ff
parent fabcfebd7a f05e5e7e5a
commit 7beacfc6ff
1 changed files with 15 additions and 0 deletions
--- a/ssl/detect-ssl-issuer.yaml
+++ b/ssl/detect-ssl-issuer.yaml
@ -0,0 +1,15 @@
+id: detect-ssl-issuer
+
+info:
+  name: Detect SSL Certificate Issuer
+  author: Lingtren
+  severity: info
+  tags: ssl
+
+ssl:
+  - address: "{{Host}}:{{Port}}"
+
+    extractors:
+      - type: json
+        json:
+          - " .issuer_organization[]"