From 4de2a8c370c5e68702118e107b52ca075692b394 Mon Sep 17 00:00:00 2001 From: Philippe Antoine Date: Fri, 12 May 2023 12:28:05 +0200 Subject: [PATCH] krb5: improves check for alert app-layer data --- tests/krb5-kerberoasting/test.yaml | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/tests/krb5-kerberoasting/test.yaml b/tests/krb5-kerberoasting/test.yaml index bd5ba8a3f..b7f1284a7 100644 --- a/tests/krb5-kerberoasting/test.yaml +++ b/tests/krb5-kerberoasting/test.yaml @@ -21,6 +21,13 @@ checks: match: event_type: alert alert.signature_id: 1 + - filter: + min-version: 8 + count: 1 + match: + event_type: alert + alert.signature_id: 1 + krb5.msg_type: KRB_TGS_REP - filter: count: 1 match: -- 2.47.2