medium10 pts · first answer countsnetwork-securityzeektls
Self-signed certificates in ssl.log
Zeek ssl.log shows a laptop connecting every 5 minutes to an IP with validation_status "self signed certificate" and no SNI. Why is this worth a look?
Discussion 0
Join free to post in the discussion.
Related questions
- IDS vs IPSCybersecurity Analyst
- What makes a firewall stateful?Cybersecurity Analyst
- The hidden last rule of a firewallCybersecurity Analyst
- Default port for SSHCybersecurity Analyst
- RDP open to the internetCybersecurity Analyst
- Why use a DMZCybersecurity Analyst
- Order of the TCP handshakeCybersecurity Analyst
- What runs on port 445Cybersecurity Analyst