[Zeek] Authentication data available in zeek logs

[Tim Larson]

I am not aware of Zeek having an authoritative list of all authentication
data so from your experience which Zeek logs would provide *useful event
data* when authenticating to each of the following:

1) web applications

2) API's

3) SSO

4) SSH

5) Windows authentication

6) FTP


Kind regards,

tim
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/zeek/attachments/20200304/315123f6/attachment-0001.html