Taufik Mulyana 7093180b6d
Add support to query DNS TLSA record (#3054)
* Add support to query DNS TLSA record

* fix build test

* fix ci-lint

* set expected to 0

* test domain update

Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com>
2022-12-28 21:12:02 +05:30

22 lines
318 B
YAML

id: tlsa-fingerprinting
info:
name: TLSA Fingerprint
author: pdteam
severity: info
tags: dns,tlsa
dns:
- name: "{{FQDN}}"
type: TLSA
matchers:
- type: word
words:
- "IN\tTLSA"
extractors:
- type: regex
group: 1
regex:
- "IN\tTLSA\t(.+)"