recog 2.2.1 → 2.3.0

Sign up to get free protection for your applications and to get access to all the features.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA1:
3
- metadata.gz: 80ec69a3559b7ecc2e37a7368a48f56b11b0faba
4
- data.tar.gz: 190c28fbdb73c3fbe3fef888a622a21316b5938a
3
+ metadata.gz: e1c998eada64784f6c8b38a44f146aea9176bde1
4
+ data.tar.gz: f651b55c9550222d5c6e91cdb49df1bbc17cfe65
5
5
  SHA512:
6
- metadata.gz: 685b325faf6078cd2cb9755e96a54b0ec8c5d1654cce6def836bc09801fad82419f20d7046a12bcc37926abe94b207793369086c2dbc035187b6ed386b2c4b83
7
- data.tar.gz: 489c56687c4138d1bb40d99705e04d8d7edb705340b9b19f5343ac026ae276e09f3b26f96b993dc28491c67c343f25ad2ace6a59d0c08dc79a90765f9eca56a3
6
+ metadata.gz: 004fc2c3552f9e60eb5c0c94533c27fbf137db37089877440a82104a041356a20c364e88e4ace79baa692a5a7edf6d4941973dd1f3d6edcc0e377008f0af5fb9
7
+ data.tar.gz: a662695949fb1ff138b845fe04f139f58988fc7f693dd9e86048e05f9a07177ffc70b77036842f04c9c0a2f22c429087760d5b9b83f2b142e32257dda28261ca
data/.travis.yml CHANGED
@@ -2,9 +2,10 @@ language: ruby
2
2
  sudo: false
3
3
  cache: bundler
4
4
  rvm:
5
- - '2.2.7'
6
- - '2.3.4'
7
- - '2.4.1'
5
+ - '2.3.8'
6
+ - '2.4.5'
7
+ - '2.5.3'
8
+ - '2.6.1'
8
9
  - 'jruby-9.1.9.0'
9
10
  before_install:
10
11
  - "echo 'gem: --no-ri --no-rdoc' > ~/.gemrc"
data/lib/recog/version.rb CHANGED
@@ -1,3 +1,3 @@
1
1
  module Recog
2
- VERSION = '2.2.1'
2
+ VERSION = '2.3.0'
3
3
  end
@@ -0,0 +1,134 @@
1
+ <?xml version="1.0" encoding="UTF-8"?>
2
+ <fingerprints matches="x509.issuer" protocol="x509">
3
+ <!--
4
+ This fingerprint set matches the Issuer field of x509 certificates. These x509
5
+ certificates may be sourced from any SSL or TLS service. If a particular system
6
+ has identical subject and issuer fields, the subject field should be preferred.
7
+
8
+ The format of the Issuer field is built from the x509 distinguished names using
9
+ a specific order. Please see the comments in x509_subjects.xml for details.
10
+
11
+ -->
12
+ <!-- Chromecast and various devices that support the Cast protocol -->
13
+ <fingerprint pattern="^CN=Chromecast ICA (\d+)\s*\(?([^,\)]*)\)?,OU=Cast,O=Google Inc,L=Mountain View,ST=California,C=US$">
14
+ <description>Google Chromecast</description>
15
+ <example chromecast.generation="3">CN=Chromecast ICA 3,OU=Cast,O=Google Inc,L=Mountain View,ST=California,C=US</example>
16
+ <example chromecast.generation="4" chromecast.capabilities="Audio">CN=Chromecast ICA 4 (Audio),OU=Cast,O=Google Inc,L=Mountain View,ST=California,C=US</example>
17
+ <example chromecast.generation="5" chromecast.capabilities="4K">CN=Chromecast ICA 5 (4K),OU=Cast,O=Google Inc,L=Mountain View,ST=California,C=US</example>
18
+ <example chromecast.generation="6" chromecast.capabilities="Audio Assist">CN=Chromecast ICA 6 (Audio Assist),OU=Cast,O=Google Inc,L=Mountain View,ST=California,C=US</example>
19
+ <example chromecast.generation="7" chromecast.capabilities="Audio Assist 2">CN=Chromecast ICA 7 (Audio Assist 2),OU=Cast,O=Google Inc,L=Mountain View,ST=California,C=US</example>
20
+ <example chromecast.generation="9" chromecast.capabilities="Audio Assist">CN=Chromecast ICA 9 (Audio Assist),OU=Cast,O=Google Inc,L=Mountain View,ST=California,C=US</example>
21
+ <example chromecast.generation="11" chromecast.capabilities="Video Assist">CN=Chromecast ICA 11 (Video Assist),OU=Cast,O=Google Inc,L=Mountain View,ST=California,C=US</example>
22
+ <example chromecast.generation="12">CN=Chromecast ICA 12,OU=Cast,O=Google Inc,L=Mountain View,ST=California,C=US</example>
23
+ <param pos="0" name="os.vendor" value="Google"/>
24
+ <param pos="0" name="os.product" value="ChromeOS"/>
25
+ <param pos="0" name="hw.device" value="Media Server"/>
26
+ <param pos="0" name="hw.vendor" value="Google"/>
27
+ <param pos="0" name="hw.product" value="Chromecast"/>
28
+ <param pos="1" name="chromecast.generation"/>
29
+ <param pos="2" name="chromecast.capabilities"/>
30
+ </fingerprint>
31
+ <fingerprint pattern="^CN=Asus fugu Cast ICA,OU=Widevine,O=Google Inc,L=Kirkland,ST=Washington,C=US$">
32
+ <description>ASUS Nexus Player (Android) with Google Cast</description>
33
+ <example>CN=Asus fugu Cast ICA,OU=Widevine,O=Google Inc,L=Kirkland,ST=Washington,C=US</example>
34
+ <param pos="0" name="os.vendor" value="Google"/>
35
+ <param pos="0" name="os.cpe23" value="cpe:/o:google:android:-"/>
36
+ <param pos="0" name="os.family" value="Linux"/>
37
+ <param pos="0" name="os.product" value="Android"/>
38
+ <param pos="0" name="hw.device" value="Media Server"/>
39
+ <param pos="0" name="hw.vendor" value="ASUS"/>
40
+ <param pos="0" name="hw.product" value="Nexus Player"/>
41
+ </fingerprint>
42
+ <fingerprint pattern="^CN=Sony amai Cast ICA,OU=Widevine,O=Google Inc,L=Kirkland,ST=Washington,C=US$">
43
+ <description>Sony SmartTV (Android) with Google Cast</description>
44
+ <example>CN=Sony amai Cast ICA,OU=Widevine,O=Google Inc,L=Kirkland,ST=Washington,C=US</example>
45
+ <param pos="0" name="os.vendor" value="Google"/>
46
+ <param pos="0" name="os.cpe23" value="cpe:/o:google:android:-"/>
47
+ <param pos="0" name="os.family" value="Linux"/>
48
+ <param pos="0" name="os.product" value="Android"/>
49
+ <param pos="0" name="hw.device" value="Smart TV"/>
50
+ <param pos="0" name="hw.vendor" value="Sony"/>
51
+ </fingerprint>
52
+ <fingerprint pattern="^CN=Cast TV ICA \(Vizio\),OU=Cast,O=Google Inc,L=Mountain View,ST=California,C=US$">
53
+ <description>Vizio SmartTV (Android) with Google Cast</description>
54
+ <example>CN=Cast TV ICA (Vizio),OU=Cast,O=Google Inc,L=Mountain View,ST=California,C=US</example>
55
+ <param pos="0" name="os.vendor" value="Google"/>
56
+ <param pos="0" name="os.cpe23" value="cpe:/o:google:android:-"/>
57
+ <param pos="0" name="os.family" value="Linux"/>
58
+ <param pos="0" name="os.product" value="Android"/>
59
+ <param pos="0" name="hw.device" value="Smart TV"/>
60
+ <param pos="0" name="hw.vendor" value="Vizio"/>
61
+ </fingerprint>
62
+ <fingerprint pattern="^CN=NVidia Shield Cast ICA,OU=Widevine,O=Google Inc,L=Kirkland,ST=Washington,C=US$">
63
+ <description>NVIDIA SHIELD (Android) with Google Cast</description>
64
+ <example>CN=NVidia Shield Cast ICA,OU=Widevine,O=Google Inc,L=Kirkland,ST=Washington,C=US</example>
65
+ <param pos="0" name="os.vendor" value="Google"/>
66
+ <param pos="0" name="os.cpe23" value="cpe:/o:google:android:-"/>
67
+ <param pos="0" name="os.family" value="Linux"/>
68
+ <param pos="0" name="os.product" value="Android"/>
69
+ <param pos="0" name="hw.device" value="Tablet"/>
70
+ <param pos="0" name="hw.vendor" value="NVIDIA"/>
71
+ <param pos="0" name="hw.product" value="SHIELD"/>
72
+ </fingerprint>
73
+ <fingerprint pattern="^CN=NVidia Darcy NVidia Tegra K1-Denver Cast ICA,OU=Widevine,O=Google Inc,L=Kirkland,ST=Washington,C=US$">
74
+ <description>NVIDIA SHIELD (Android) with Google Cast (Darcy)</description>
75
+ <example>CN=NVidia Darcy NVidia Tegra K1-Denver Cast ICA,OU=Widevine,O=Google Inc,L=Kirkland,ST=Washington,C=US</example>
76
+ <param pos="0" name="os.vendor" value="Google"/>
77
+ <param pos="0" name="os.cpe23" value="cpe:/o:google:android:-"/>
78
+ <param pos="0" name="os.family" value="Linux"/>
79
+ <param pos="0" name="os.product" value="Android"/>
80
+ <param pos="0" name="hw.device" value="Tablet"/>
81
+ <param pos="0" name="hw.vendor" value="NVIDIA"/>
82
+ <param pos="0" name="hw.product" value="SHIELD"/>
83
+ </fingerprint>
84
+ <!-- End of Chromecast -->
85
+ <fingerprint pattern="^CN=Yealink Equipment Issuing CA,OU=yealink\.com,O=Yealink Network Technology Co\.\\,Ltd.,L=Xiamen,ST=Fujian,C=CN$">
86
+ <description>Yealink VoIP Phone</description>
87
+ <example>CN=Yealink Equipment Issuing CA,OU=yealink.com,O=Yealink Network Technology Co.\,Ltd.,L=Xiamen,ST=Fujian,C=CN</example>
88
+ <param pos="0" name="os.vendor" value="Yealink"/>
89
+ <param pos="0" name="os.family" value="Linux"/>
90
+ <param pos="0" name="os.product" value="Linux"/>
91
+ <param pos="0" name="hw.device" value="IP Phone"/>
92
+ <param pos="0" name="hw.vendor" value="Yealink"/>
93
+ </fingerprint>
94
+ <fingerprint pattern="^CN=[a-zA-Z0-9]+,OU=Internally Generated Certificate,O=American Power Conversion Corp,L=Default Locality,ST=Default State,C=US$">
95
+ <description>APC UPS</description>
96
+ <example>CN=ZA1117619249,OU=Internally Generated Certificate,O=American Power Conversion Corp,L=Default Locality,ST=Default State,C=US</example>
97
+ <param pos="0" name="hw.device" value="Power Device"/>
98
+ <param pos="0" name="hw.vendor" value="APC"/>
99
+ </fingerprint>
100
+ <fingerprint pattern="^CN=Temporary CA [a-fA-F0-9]{8}\-[a-fA-F0-9]{4}\-[a-fA-F0-9]{4}\-[a-fA-F0-9]{4}\-[a-fA-F0-9]{12},OU=Temporary CA">
101
+ <description>Cisco Video Communication Server</description>
102
+ <example>CN=Temporary CA 218131fe-8af4-11e7-aa6e-9950d6bbaf74,OU=Temporary CA 218131fe-8af4-11e7-aa6e-9950d6bbaf74,O=Temporary CA 218131fe-8af4-11e7-aa6e-9950d6bbaf74</example>
103
+ <param pos="0" name="hw.device" value="Video Conference"/>
104
+ <param pos="0" name="hw.vendor" value="Cisco"/>
105
+ <param pos="0" name="hw.product" value="TelePresence"/>
106
+ </fingerprint>
107
+ <fingerprint pattern="^O=VMware Installer$">
108
+ <description>VMWare ESXi w/Installer</description>
109
+ <example>O=VMware Installer</example>
110
+ <param pos="0" name="os.vendor" value="VMWare"/>
111
+ <param pos="0" name="os.cpe23" value="cpe:/o:vmware:esxi:-"/>
112
+ <param pos="0" name="os.product" value="ESXi"/>
113
+ <param pos="0" name="os.device" value="Hypervisor"/>
114
+ </fingerprint>
115
+ <fingerprint pattern="^CN=CA,OU=VMware Engineering,O=vCenter,ST=California,C=US$">
116
+ <description>VMWare vCenter</description>
117
+ <example>CN=CA,OU=VMware Engineering,O=vCenter,ST=California,C=US</example>
118
+ <param pos="0" name="service.vendor" value="VMWare"/>
119
+ <param pos="0" name="service.product" value="vCenter"/>
120
+ </fingerprint>
121
+ <fingerprint pattern="^CN=Default Issuer \(Do not trust\),OU=ISS,O=Hewlett Packard Enterprise,L=Houston,ST=Texas,C=US$">
122
+ <description>HP iLO</description>
123
+ <example>CN=Default Issuer (Do not trust),OU=ISS,O=Hewlett Packard Enterprise,L=Houston,ST=Texas,C=US</example>
124
+ <param pos="0" name="hw.device" value="Lights Out Management"/>
125
+ <param pos="0" name="hw.vendor" value="HP"/>
126
+ <param pos="0" name="hw.family" value="iLO"/>
127
+ <param pos="0" name="hw.cpe23" value="cpe:/h:hp:integrated_lights_out:-"/>
128
+ <param pos="0" name="hw.product" value="iLO"/>
129
+ <param pos="0" name="os.device" value="Lights Out Management"/>
130
+ <param pos="0" name="os.vendor" value="HP"/>
131
+ <param pos="0" name="os.family" value="iLO"/>
132
+ <param pos="0" name="os.product" value="iLO"/>
133
+ </fingerprint>
134
+ </fingerprints>
@@ -0,0 +1,952 @@
1
+ <?xml version="1.0" encoding="UTF-8"?>
2
+ <fingerprints matches="x509.subject" protocol="x509">
3
+ <!--
4
+ This fingerprint set matches the Subject field of x509 certificates. These x509
5
+ certificates may be sourced from any SSL or TLS service. If a particular system
6
+ has identical subject and issuer fields, the subject field should be preferred.
7
+
8
+ The format of the Subject field is built from the x509 distinguished names using
9
+ a specific order. This order matches the Go implementation at the URL:
10
+ https://golang.org/src/crypto/x509/pkix/pkix.go#203
11
+
12
+ The ToRDNSequence() function builds the string in reverse order:
13
+
14
+ func (n Name) ToRDNSequence() (ret RDNSequence) {
15
+ ret = n.appendRDNs(ret, n.Country, oidCountry)
16
+ ret = n.appendRDNs(ret, n.Province, oidProvince)
17
+ ret = n.appendRDNs(ret, n.Locality, oidLocality)
18
+ ret = n.appendRDNs(ret, n.StreetAddress, oidStreetAddress)
19
+ ret = n.appendRDNs(ret, n.PostalCode, oidPostalCode)
20
+ ret = n.appendRDNs(ret, n.Organization, oidOrganization)
21
+ ret = n.appendRDNs(ret, n.OrganizationalUnit, oidOrganizationalUnit)
22
+ if len(n.CommonName) > 0 {
23
+ ret = n.appendRDNs(ret, []string{n.CommonName}, oidCommonName)
24
+ }
25
+ if len(n.SerialNumber) > 0 {
26
+ ret = n.appendRDNs(ret, []string{n.SerialNumber}, oidSerialNumber)
27
+ }
28
+ for _, atv := range n.ExtraNames {
29
+ ret = append(ret, []AttributeTypeAndValue{atv})
30
+ }
31
+
32
+ return ret
33
+ }
34
+
35
+ All names are separated by commas and any commas inside a name are escaped with a
36
+ single backslash character. See RFC 2253 for additional details on formatting.
37
+
38
+ Practically, most Subjects start with the Common Name (CN=) and then step through
39
+ Organization Unit (OU), Organization (O), and then some level of location, but
40
+ typically Locality (L) and Country (C). Names are guaranteed to be listed in
41
+ the order described above, but may start at any point in the list. For example,
42
+ Subjects may start with a Serial Number (SERIALNUMBER=) or even Extra Names, but
43
+ these are somewhat rare. Keep this name order in mind when working on these
44
+ fingerprints.
45
+
46
+ The same constraints also apply to the x509 Issuers (x509_issuers.xml).
47
+
48
+ -->
49
+ <fingerprint pattern="^CN=([0-9a-fA-F]{2}:[0-9a-fA-F]{2}:[0-9a-fA-F]{2}:[0-9a-fA-F]{2}:[0-9a-fA-F]{2}:[0-9a-fA-F]{2}),OU=([^,]+),O=Araknis Networks \(TM\),L=Charlotte,C=US$">
50
+ <description>Araknis Networks Router</description>
51
+ <example host.mac="d4:6a:91:7a:a3:c4" hw.product="AN-300-RT-4L2W">CN=d4:6a:91:7a:a3:c4,OU=AN-300-RT-4L2W,O=Araknis Networks (TM),L=Charlotte,C=US</example>
52
+ <param pos="0" name="hw.device" value="Router"/>
53
+ <param pos="0" name="hw.vendor" value="Araknis Networks"/>
54
+ <param pos="2" name="hw.product"/>
55
+ <param pos="1" name="host.mac"/>
56
+ </fingerprint>
57
+ <fingerprint pattern="^CN=([a-fA-F0-9:]+),OU=([^,]+),O=Cisco-Linksys\\, LLC">
58
+ <description>Cisco / Linksys Router</description>
59
+ <example host.mac="00:22:6b:ef:1e:d0" hw.product="RV042">CN=00:22:6b:ef:1e:d0,OU=RV042,O=Cisco-Linksys\, LLC,L=Irvine,C=US</example>
60
+ <param pos="0" name="hw.device" value="Broadband Router"/>
61
+ <param pos="0" name="hw.vendor" value="Cisco"/>
62
+ <param pos="2" name="hw.product"/>
63
+ <param pos="1" name="host.mac"/>
64
+ </fingerprint>
65
+ <fingerprint pattern="^CN=([a-fA-F0-9\:]+),OU=([^,]+),O=Cisco Systems\\, Inc\.">
66
+ <description>Cisco Post-Linksys Router</description>
67
+ <example host.mac="74:a2:e6:5c:99:21" hw.product="RV042G">CN=74:a2:e6:5c:99:21,OU=RV042G,O=Cisco Systems\, Inc.,L=Irvine,C=US</example>
68
+ <example host.mac="4C4E315901D0" hw.product="RV180">CN=4C4E315901D0,OU=RV180,O=Cisco Systems\, Inc.,C=US</example>
69
+ <param pos="0" name="hw.device" value="Broadband Router"/>
70
+ <param pos="0" name="hw.vendor" value="Cisco"/>
71
+ <param pos="2" name="hw.product"/>
72
+ <param pos="1" name="host.mac"/>
73
+ </fingerprint>
74
+ <fingerprint pattern="^SERIALNUMBER=PID:([^ ]+) SN:([^,]+),CN=(?:[a-zA-Z0-9\-]+)-SEP([a-fA-F0-9]{12}),OU=CTG,O=Cisco Systems Inc\.$">
75
+ <description>Cisco / Linksys Router</description>
76
+ <example host.mac="B07D47D33A1C" hw.product="CP-8851" cisco.serial_number="FCH1924AHCA">SERIALNUMBER=PID:CP-8851 SN:FCH1924AHCA,CN=CP-8851-SEPB07D47D33A1C,OU=CTG,O=Cisco Systems Inc.</example>
77
+ <param pos="0" name="hw.device" value="IP Phone"/>
78
+ <param pos="0" name="hw.vendor" value="Cisco"/>
79
+ <param pos="1" name="hw.product"/>
80
+ <param pos="2" name="cisco.serial_number"/>
81
+ <param pos="3" name="host.mac"/>
82
+ </fingerprint>
83
+ <fingerprint pattern="^CN=Cambium WLAN AP,OU=Products,O=Cambium Networks Inc,L=San Jose,ST=CA,C=US$">
84
+ <description>Cambium Networks WAP</description>
85
+ <example>CN=Cambium WLAN AP,OU=Products,O=Cambium Networks Inc,L=San Jose,ST=CA,C=US</example>
86
+ <param pos="0" name="hw.device" value="WAP"/>
87
+ <param pos="0" name="hw.vendor" value="Cambium Networks"/>
88
+ <param pos="0" name="hw.product" value="WLAN AP"/>
89
+ </fingerprint>
90
+ <fingerprint pattern="^CN=([^,]+),OU=Products,O=Cambium Networks Inc,L=San Jose,ST=CA,C=US$">
91
+ <description>Cambium Networks Router</description>
92
+ <example hw.product="R190V">CN=R190V,OU=Products,O=Cambium Networks Inc,L=San Jose,ST=CA,C=US</example>
93
+ <example hw.product="R200">CN=R200,OU=Products,O=Cambium Networks Inc,L=San Jose,ST=CA,C=US</example>
94
+ <param pos="0" name="hw.device" value="Router"/>
95
+ <param pos="0" name="hw.vendor" value="Cambium Networks"/>
96
+ <param pos="1" name="hw.product"/>
97
+ </fingerprint>
98
+ <fingerprint pattern="^CN=Nepenthes Development Team,OU=anv,O=dionaea\.carnivore\.it,C=DE$">
99
+ <description>Nepenthes honeypot</description>
100
+ <example>CN=Nepenthes Development Team,OU=anv,O=dionaea.carnivore.it,C=DE</example>
101
+ <param pos="0" name="service.family" value="Nepenthes"/>
102
+ <param pos="0" name="service.product" value="Nepenthes"/>
103
+ </fingerprint>
104
+ <fingerprint pattern="^CN=IPMI,OU=Software,O=Super Micro Computer,ST=California,C=US$">
105
+ <description>Super Micro IPMI Controller</description>
106
+ <example>CN=IPMI,OU=Software,O=Super Micro Computer,ST=California,C=US</example>
107
+ <param pos="0" name="hw.device" value="Lights Out Management"/>
108
+ <param pos="0" name="hw.vendor" value="Super Micro"/>
109
+ <param pos="0" name="hw.product" value="IPMI"/>
110
+ <param pos="0" name="os.vendor" value="Super Micro"/>
111
+ <param pos="0" name="os.product" value="ATEN Linux"/>
112
+ </fingerprint>
113
+ <fingerprint pattern="^CN=iDRACdefault([a-fA-F0-9]{12}),OU=iDRAC Group,O=Dell Inc.,L=Round Rock,C=US$">
114
+ <description>Dell iDRAC Remote Access Controller w/MAC</description>
115
+ <example host.mac="0023AEF89AD1">CN=iDRACdefault0023AEF89AD1,OU=iDRAC Group,O=Dell Inc.,L=Round Rock,C=US</example>
116
+ <param pos="0" name="hw.device" value="Lights Out Management"/>
117
+ <param pos="0" name="hw.vendor" value="Dell"/>
118
+ <param pos="0" name="hw.product" value="iDRAC"/>
119
+ <param pos="0" name="os.vendor" value="Dell"/>
120
+ <param pos="0" name="os.product" value="iDRAC Linux"/>
121
+ <param pos="1" name="host.mac"/>
122
+ </fingerprint>
123
+ <fingerprint pattern="^CN=idrac-([A-Z0-9]{7}),OU=Remote Access Group,O=Dell Inc\.,L=Round Rock,ST=Texas,C=US$">
124
+ <description>Dell iDRAC Remote Access Controller w/Service Tag</description>
125
+ <example dell.service_tag="JXJJC02">CN=idrac-JXJJC02,OU=Remote Access Group,O=Dell Inc.,L=Round Rock,ST=Texas,C=US</example>
126
+ <example dell.service_tag="FMDSJH3">CN=idrac-FMDSJH3,OU=Remote Access Group,O=Dell Inc.,L=Round Rock,ST=Texas,C=US</example>
127
+ <param pos="0" name="hw.device" value="Lights Out Management"/>
128
+ <param pos="0" name="hw.vendor" value="Dell"/>
129
+ <param pos="0" name="hw.product" value="iDRAC"/>
130
+ <param pos="0" name="os.vendor" value="Dell"/>
131
+ <param pos="0" name="os.product" value="iDRAC Linux"/>
132
+ <param pos="1" name="dell.service_tag"/>
133
+ </fingerprint>
134
+ <fingerprint pattern="^CN=idrac.*,OU=Remote Access Group,O=Dell Inc\.,L=Round Rock,ST=Texas,C=US$">
135
+ <description>Dell iDRAC Remote Access Controller w/o Service Tag</description>
136
+ <example>CN=idrac-SVCTAG,OU=Remote Access Group,O=Dell Inc.,L=Round Rock,ST=Texas,C=US</example>
137
+ <example>CN=idrac-prosit-laks,OU=Remote Access Group,O=Dell Inc.,L=Round Rock,ST=Texas,C=US</example>
138
+ <example>CN=idrac-,OU=Remote Access Group,O=Dell Inc.,L=Round Rock,ST=Texas,C=US</example>
139
+ <example>CN=idrac-SVCTAG,OU=Remote Access Group,O=Dell Inc.,L=Round Rock,ST=Texas,C=US</example>
140
+ <example>CN=idrac,OU=Remote Access Group,O=Dell Inc.,L=Round Rock,ST=Texas,C=US</example>
141
+ <example>CN=idrac,OU=Remote Access Group,O=Dell Inc.,L=Round Rock,ST=Texas,C=US</example>
142
+ <example>CN=idrac-SVCTAG,OU=Remote Access Group,O=Dell Inc.,L=Round Rock,ST=Texas,C=US</example>
143
+ <param pos="0" name="hw.device" value="Lights Out Management"/>
144
+ <param pos="0" name="hw.vendor" value="Dell"/>
145
+ <param pos="0" name="hw.product" value="iDRAC"/>
146
+ <param pos="0" name="os.vendor" value="Dell"/>
147
+ <param pos="0" name="os.product" value="iDRAC Linux"/>
148
+ </fingerprint>
149
+ <fingerprint pattern="^CN=(i?DRAC\d+) default certificate,OU=Remote Access Group,O=Dell Inc\.,L=Round Rock,ST=Texas,C=US$">
150
+ <description>Dell iDRAC Remote Access Controller w/Version</description>
151
+ <example>CN=iDRAC7 default certificate,OU=Remote Access Group,O=Dell Inc.,L=Round Rock,ST=Texas,C=US</example>
152
+ <example>CN=iDRAC6 default certificate,OU=Remote Access Group,O=Dell Inc.,L=Round Rock,ST=Texas,C=US</example>
153
+ <example>CN=DRAC5 default certificate,OU=Remote Access Group,O=Dell Inc.,L=Round Rock,ST=Texas,C=US</example>
154
+ <param pos="0" name="hw.device" value="Lights Out Management"/>
155
+ <param pos="0" name="hw.vendor" value="Dell"/>
156
+ <param pos="1" name="hw.product"/>
157
+ <param pos="0" name="os.vendor" value="Dell"/>
158
+ <param pos="0" name="os.product" value="iDRAC Linux"/>
159
+ </fingerprint>
160
+ <fingerprint pattern="^CN=iDRAC default certificate,OU=Server Firmware Group,O=Dell Inc\.,L=Round Rock,ST=Texas,C=US$">
161
+ <description>Dell iDRAC Remote Access Controller Default Certificate</description>
162
+ <example>CN=iDRAC default certificate,OU=Server Firmware Group,O=Dell Inc.,L=Round Rock,ST=Texas,C=US</example>
163
+ <param pos="0" name="hw.device" value="Lights Out Management"/>
164
+ <param pos="0" name="hw.vendor" value="Dell"/>
165
+ <param pos="0" name="hw.product" value="iDRAC"/>
166
+ <param pos="0" name="os.vendor" value="Dell"/>
167
+ <param pos="0" name="os.product" value="iDRAC Linux"/>
168
+ </fingerprint>
169
+ <fingerprint pattern="^CN=XCC-([a-zA-Z0-9]+)-([a-zA-Z0-9]+),O=System X,L=RTP,ST=NC,C=US$">
170
+ <description>Lenovo XCC</description>
171
+ <example lenovo.machine_type="7X06" lenovo.machine_model="J1005NEX">CN=XCC-7X06-J1005NEX,O=System X,L=RTP,ST=NC,C=US</example>
172
+ <param pos="0" name="hw.device" value="Lights Out Management"/>
173
+ <param pos="0" name="hw.vendor" value="Lenovo"/>
174
+ <param pos="0" name="hw.family" value="System X"/>
175
+ <param pos="0" name="hw.product" value="XCC"/>
176
+ <param pos="0" name="os.vendor" value="Lenovo"/>
177
+ <param pos="0" name="os.product" value="XCC Linux"/>
178
+ <param pos="1" name="lenovo.machine_type"/>
179
+ <param pos="2" name="lenovo.machine_model"/>
180
+ </fingerprint>
181
+ <fingerprint pattern="^CN=([A-Za-z0-9\_\-\.]+),OU=ISS,O=Hewlett-Packard Company,L=Houston,ST=Texas,C=US$">
182
+ <description>HP iLO</description>
183
+ <example>CN=SERVER-1231,OU=ISS,O=Hewlett-Packard Company,L=Houston,ST=Texas,C=US</example>
184
+ <param pos="0" name="hw.device" value="Lights Out Management"/>
185
+ <param pos="0" name="hw.vendor" value="HP"/>
186
+ <param pos="0" name="hw.family" value="iLO"/>
187
+ <param pos="0" name="hw.cpe23" value="cpe:/h:hp:integrated_lights_out:-"/>
188
+ <param pos="0" name="hw.product" value="iLO"/>
189
+ <param pos="0" name="os.device" value="Lights Out Management"/>
190
+ <param pos="0" name="os.vendor" value="HP"/>
191
+ <param pos="0" name="os.family" value="iLO"/>
192
+ <param pos="0" name="os.product" value="iLO"/>
193
+ <param pos="1" name="host.name"/>
194
+ </fingerprint>
195
+ <fingerprint pattern="^CN=HP Service Processor,OU=UDU Service Tools,O=Hewlett-Packard Development Company\\, L\.P\.\\ ,L=Fremont,ST=California,C=US$">
196
+ <description>HP iLO</description>
197
+ <example>CN=HP Service Processor,OU=UDU Service Tools,O=Hewlett-Packard Development Company\, L.P.\ ,L=Fremont,ST=California,C=US</example>
198
+ <param pos="0" name="hw.device" value="Lights Out Management"/>
199
+ <param pos="0" name="hw.vendor" value="HP"/>
200
+ <param pos="0" name="hw.family" value="iLO"/>
201
+ <param pos="0" name="hw.cpe23" value="cpe:/h:hp:integrated_lights_out:-"/>
202
+ <param pos="0" name="hw.product" value="iLO"/>
203
+ <param pos="0" name="os.device" value="Lights Out Management"/>
204
+ <param pos="0" name="os.vendor" value="HP"/>
205
+ <param pos="0" name="os.family" value="iLO"/>
206
+ <param pos="0" name="os.product" value="iLO"/>
207
+ </fingerprint>
208
+ <fingerprint pattern="^CN=OA\-([a-fA-F0-9]+),OU=Onboard Administrator,">
209
+ <description>HP iLO (Onboard Administrator)</description>
210
+ <example>CN=OA-001F296E21A3,OU=Onboard Administrator,O=Corp.,L=Location,ST=N/A,C=US</example>
211
+ <example>CN=OA-80C16E999999,OU=Onboard Administrator,O=Hewlett-Packard</example>
212
+ <param pos="0" name="hw.device" value="Lights Out Management"/>
213
+ <param pos="0" name="hw.vendor" value="HP"/>
214
+ <param pos="0" name="hw.family" value="iLO"/>
215
+ <param pos="0" name="hw.cpe23" value="cpe:/h:hp:integrated_lights_out:-"/>
216
+ <param pos="0" name="hw.product" value="iLO"/>
217
+ <param pos="0" name="os.device" value="Lights Out Management"/>
218
+ <param pos="0" name="os.vendor" value="HP"/>
219
+ <param pos="0" name="os.family" value="iLO"/>
220
+ <param pos="0" name="os.product" value="iLO"/>
221
+ <param pos="1" name="host.mac"/>
222
+ </fingerprint>
223
+ <fingerprint pattern="^CN=([A-Za-z0-9\_\-\.]+),OU=Hewlett Packard Enterprise Network Management Software \(SMH\),O=Hewlett Packard Enterprise,L=Houston,ST=Texas,C=US$">
224
+ <description>HP iLO</description>
225
+ <example>CN=bigsrv99,OU=Hewlett Packard Enterprise Network Management Software (SMH),O=Hewlett Packard Enterprise,L=Houston,ST=Texas,C=US</example>
226
+ <param pos="0" name="hw.device" value="Lights Out Management"/>
227
+ <param pos="0" name="hw.vendor" value="HP"/>
228
+ <param pos="0" name="hw.family" value="iLO"/>
229
+ <param pos="0" name="hw.cpe23" value="cpe:/h:hp:integrated_lights_out:-"/>
230
+ <param pos="0" name="hw.product" value="iLO"/>
231
+ <param pos="0" name="os.device" value="Lights Out Management"/>
232
+ <param pos="0" name="os.vendor" value="HP"/>
233
+ <param pos="0" name="os.family" value="iLO"/>
234
+ <param pos="0" name="os.product" value="iLO"/>
235
+ <param pos="1" name="host.name"/>
236
+ </fingerprint>
237
+ <fingerprint pattern="^CN=Oracle Integrated Lights Out Manager,O=Oracle America\\, Inc\.,L=Redwood Shores,ST=California,C=US$">
238
+ <description>Oracle iLO</description>
239
+ <example>CN=Oracle Integrated Lights Out Manager,O=Oracle America\, Inc.,L=Redwood Shores,ST=California,C=US</example>
240
+ <param pos="0" name="hw.device" value="Lights Out Management"/>
241
+ <param pos="0" name="hw.vendor" value="Oracle"/>
242
+ <param pos="0" name="hw.family" value="ILOM"/>
243
+ <param pos="0" name="hw.product" value="ILOM"/>
244
+ <param pos="0" name="os.device" value="Lights Out Management"/>
245
+ <param pos="0" name="os.vendor" value="Oracle"/>
246
+ <param pos="0" name="os.family" value="ILOM"/>
247
+ <param pos="0" name="os.product" value="ILOM"/>
248
+ </fingerprint>
249
+ <fingerprint pattern="^CN=AMI,OU=Service Processors,O=American Megatrends Inc\.,L=Norcross,ST=Georgia,C=US$">
250
+ <description>AMI MegaRAC LOM</description>
251
+ <example>CN=AMI,OU=Service Processors,O=American Megatrends Inc.,L=Norcross,ST=Georgia,C=US</example>
252
+ <param pos="0" name="hw.device" value="Lights Out Management"/>
253
+ <param pos="0" name="hw.vendor" value="AMI"/>
254
+ <param pos="0" name="hw.family" value="MegaRAC"/>
255
+ <param pos="0" name="hw.product" value="MegaRAC"/>
256
+ <param pos="0" name="os.device" value="Lights Out Management"/>
257
+ <param pos="0" name="os.vendor" value="AMI"/>
258
+ <param pos="0" name="os.family" value="MegaRAC"/>
259
+ <param pos="0" name="os.product" value="MegaRAC"/>
260
+ </fingerprint>
261
+ <fingerprint pattern="^CN=avocent.com,OU=AESS,O=Avocent,L=Sunrise,ST=FL,C=US$">
262
+ <description>Avocent KVM</description>
263
+ <example>CN=avocent.com,OU=AESS,O=Avocent,L=Sunrise,ST=FL,C=US</example>
264
+ <param pos="0" name="hw.device" value="KVM"/>
265
+ <param pos="0" name="hw.vendor" value="Avocent"/>
266
+ <param pos="0" name="os.device" value="KVM"/>
267
+ <param pos="0" name="os.vendor" value="Avocent"/>
268
+ </fingerprint>
269
+ <fingerprint pattern="^CN=Avocent Mergepoint Unity,O=Avocent Mergepoint Unity,L=Huntsville,ST=Alabama,C=US$">
270
+ <description>Avocent KVM</description>
271
+ <example>CN=Avocent Mergepoint Unity,O=Avocent Mergepoint Unity,L=Huntsville,ST=Alabama,C=US</example>
272
+ <param pos="0" name="hw.device" value="KVM"/>
273
+ <param pos="0" name="hw.vendor" value="Avocent"/>
274
+ <param pos="0" name="hw.product" value="Mergepoint"/>
275
+ <param pos="0" name="os.device" value="KVM"/>
276
+ <param pos="0" name="os.vendor" value="Avocent"/>
277
+ <param pos="0" name="os.product" value="Mergepoint"/>
278
+ </fingerprint>
279
+ <fingerprint pattern="^CN=HP Jetdirect [a-zA-Z0-9]+,OU=([a-fA-F0-9]{12})\+OU=([a-zA-Z0-9]+),O=Hewlett-Packard Co\.$">
280
+ <description>HP Jet Direct</description>
281
+ <example>CN=HP Jetdirect 38831831,OU=2C413883186A+OU=J8028E,O=Hewlett-Packard Co.</example>
282
+ <example>CN=HP Jetdirect FBFA31E7,OU=8851FBE33ABB+OU=J8016E,O=Hewlett-Packard Co.</example>
283
+ <param pos="0" name="hw.device" value="Printer"/>
284
+ <param pos="0" name="hw.vendor" value="HP"/>
285
+ <param pos="0" name="hw.family" value="JetDirect"/>
286
+ <param pos="0" name="os.device" value="Printer"/>
287
+ <param pos="0" name="os.vendor" value="HP"/>
288
+ <param pos="0" name="os.family" value="JetDirect"/>
289
+ <param pos="1" name="host.mac"/>
290
+ <param pos="2" name="hw.product"/>
291
+ <param pos="2" name="os.product"/>
292
+ </fingerprint>
293
+ <fingerprint pattern="^CN=([a-zA-Z0-9\.\-\_]+),OU=HP-IPG,O=HP,L=Vancouver,ST=Washington,C=US$">
294
+ <description>HP Jet Direct</description>
295
+ <example host.name="HPD49F21">CN=HPD49F21,OU=HP-IPG,O=HP,L=Vancouver,ST=Washington,C=US</example>
296
+ <param pos="0" name="hw.device" value="Printer"/>
297
+ <param pos="0" name="hw.vendor" value="HP"/>
298
+ <param pos="0" name="hw.family" value="JetDirect"/>
299
+ <param pos="0" name="os.device" value="Printer"/>
300
+ <param pos="0" name="os.vendor" value="HP"/>
301
+ <param pos="0" name="os.family" value="JetDirect"/>
302
+ <param pos="1" name="host.name"/>
303
+ </fingerprint>
304
+ <fingerprint pattern="^CN=(?:Sourcefire3D|firepower|ciscoasa),OU=Intrusion Management System,O=(?:Sourcefire\\, Inc.|Cisco Systems\\, Inc),C=US$">
305
+ <description>Cisco Firepower</description>
306
+ <example>CN=firepower,OU=Intrusion Management System,O=Cisco Systems\, Inc,C=US</example>
307
+ <example>CN=ciscoasa,OU=Intrusion Management System,O=Cisco Systems\, Inc,C=US</example>
308
+ <example>CN=Sourcefire3D,OU=Intrusion Management System,O=Sourcefire\, Inc.,C=US</example>
309
+ <param pos="0" name="hw.device" value="IPS"/>
310
+ <param pos="0" name="hw.vendor" value="Cisco"/>
311
+ <param pos="0" name="hw.product" value="Firepower"/>
312
+ <param pos="0" name="os.device" value="IPS"/>
313
+ <param pos="0" name="os.vendor" value="Cisco"/>
314
+ <param pos="0" name="os.product" value="Firepower"/>
315
+ <param pos="0" name="os.family" value="Linux"/>
316
+ </fingerprint>
317
+ <fingerprint pattern="^CN=ASA Temporary Self Signed Certificate$">
318
+ <description>Cisco ASA</description>
319
+ <example>CN=ASA Temporary Self Signed Certificate</example>
320
+ <param pos="0" name="hw.device" value="Firewall"/>
321
+ <param pos="0" name="hw.cpe23" value="cpe:/h:cisco:adaptive_security_appliance:-"/>
322
+ <param pos="0" name="hw.vendor" value="Cisco"/>
323
+ <param pos="0" name="hw.product" value="Adaptive Security Appliance"/>
324
+ </fingerprint>
325
+ <fingerprint pattern="^CN=synology\.com.*,O=Synology Inc\.,L=Taipei.*,C=TW$">
326
+ <description>Synology NAS</description>
327
+ <example>CN=synology.com,OU=FTP Team,O=Synology Inc.,L=Taipei,ST=Taiwan,C=TW</example>
328
+ <example>CN=synology.com,O=Synology Inc.,L=Taipei,C=TW</example>
329
+ <param pos="0" name="hw.vendor" value="Synology"/>
330
+ <param pos="0" name="hw.family" value="DiskStation"/>
331
+ <param pos="0" name="hw.device" value="Storage"/>
332
+ <param pos="0" name="os.device" value="Storage"/>
333
+ <param pos="0" name="os.family" value="Linux"/>
334
+ <param pos="0" name="os.product" value="DSM"/>
335
+ <param pos="0" name="os.vendor" value="Synology"/>
336
+ </fingerprint>
337
+ <fingerprint pattern="^CN=(?:\*\.)?([a-zA-Z0-9\.\_\-]+)\.wd2go\.com">
338
+ <description>Western Digital WD2GO Devices</description>
339
+ <example wd2go.device_id="device1133796-01b3e3fa">CN=device1133796-01b3e3fa.wd2go.com,OU=Domain Control Validated+OU=Hosted by Western Digital Corporation+OU=COMODO SSL Unified Communications</example>
340
+ <example wd2go.device_id="device4113440">CN=*.device4113440.wd2go.com,OU=Branded Products,O=Western Digital,L=Mountain View,ST=California,C=US</example>
341
+ <param pos="0" name="hw.vendor" value="Western Digital"/>
342
+ <param pos="0" name="hw.family" value="WD2GO"/>
343
+ <param pos="0" name="hw.device" value="Storage"/>
344
+ <param pos="0" name="os.family" value="Linux"/>
345
+ <param pos="0" name="os.vendor" value="Western Digital"/>
346
+ <param pos="0" name="os.device" value="Storage"/>
347
+ <param pos="1" name="wd2go.device_id"/>
348
+ </fingerprint>
349
+ <fingerprint pattern="^CN=Seagate Technology LLC,O=Seagate Technology LLC,L=Cupertino,ST=California,C=US$">
350
+ <description>Seagate NAS</description>
351
+ <example>CN=Seagate Technology LLC,O=Seagate Technology LLC,L=Cupertino,ST=California,C=US</example>
352
+ <param pos="0" name="hw.vendor" value="Seagate"/>
353
+ <param pos="0" name="hw.device" value="Storage"/>
354
+ <param pos="0" name="os.vendor" value="Seagate"/>
355
+ <param pos="0" name="os.family" value="Linux"/>
356
+ </fingerprint>
357
+ <fingerprint pattern="^CN=[\d\.]+,OU=Q-Series,O=Quantum,ST=CO,C=US$">
358
+ <description>Seagate Q-Series NAS (previously Quantum)</description>
359
+ <example>CN=1.1.1.1,OU=Q-Series,O=Quantum,ST=CO,C=US</example>
360
+ <param pos="0" name="hw.vendor" value="Seagate"/>
361
+ <param pos="0" name="hw.device" value="Storage"/>
362
+ <param pos="0" name="os.vendor" value="Seagate"/>
363
+ <param pos="0" name="os.family" value="Linux"/>
364
+ </fingerprint>
365
+ <fingerprint pattern="^CN=QNAP NAS,OU=QTS,O=QNAP Systems\\, Inc\.,L=Taipei,ST=Taipei,C=TW$">
366
+ <description>QNAP NAS</description>
367
+ <example>CN=QNAP NAS,OU=QTS,O=QNAP Systems\, Inc.,L=Taipei,ST=Taipei,C=TW</example>
368
+ <param pos="0" name="hw.vendor" value="QNAP Systems"/>
369
+ <param pos="0" name="hw.family" value="Storage"/>
370
+ <param pos="0" name="hw.device" value="Storage"/>
371
+ <param pos="0" name="os.family" value="Linux"/>
372
+ <param pos="0" name="os.vendor" value="QNAP Systems"/>
373
+ <param pos="0" name="os.device" value="Storage"/>
374
+ </fingerprint>
375
+ <fingerprint pattern="^CN=VMware,OU=VMware,L=Palo Alto,C=US$">
376
+ <description>VMWare Authentication Daemon</description>
377
+ <example>CN=VMware,OU=VMware,L=Palo Alto,C=US</example>
378
+ <param pos="0" name="service.vendor" value="VMWare"/>
379
+ <param pos="0" name="service.product" value="vmauthd"/>
380
+ </fingerprint>
381
+ <fingerprint pattern="^CN=([a-zA-Z0-9\.\-\_]+),OU=VMware ESX Server Default Certificate,O=VMware\\, Inc,L=Palo Alto,ST=California,C=US$">
382
+ <description>VMWare ESX</description>
383
+ <example>CN=server99.,OU=VMware ESX Server Default Certificate,O=VMware\, Inc,L=Palo Alto,ST=California,C=US</example>
384
+ <param pos="0" name="os.vendor" value="VMWare"/>
385
+ <param pos="0" name="os.cpe23" value="cpe:/o:vmware:esx:-"/>
386
+ <param pos="0" name="os.product" value="ESX"/>
387
+ <param pos="0" name="os.device" value="Hypervisor"/>
388
+ <param pos="1" name="host.name"/>
389
+ </fingerprint>
390
+ <fingerprint pattern="^CN=IOS-Self-Signed-Certificate-">
391
+ <description>Cisco IOS Default Certificate</description>
392
+ <example>CN=IOS-Self-Signed-Certificate-4163115936</example>
393
+ <param pos="0" name="os.vendor" value="Cisco"/>
394
+ <param pos="0" name="os.cpe23" value="cpe:/o:cisco:ios:-"/>
395
+ <param pos="0" name="os.family" value="IOS"/>
396
+ <param pos="0" name="os.product" value="IOS"/>
397
+ <param pos="0" name="hw.vendor" value="Cisco"/>
398
+ <param pos="0" name="hw.device" value="Router"/>
399
+ </fingerprint>
400
+ <fingerprint pattern="^CN=([a-zA-Z0-9]{5,12}) ([a-zA-Z0-9]{12}),OU=Cast,O=Google Inc,L=Mountain View,ST=California,C=US$">
401
+ <description>Google Chromecast</description>
402
+ <example chromecast.serial_number="LVDZG5" host.mac_local="FA8FCA67413D">CN=LVDZG5 FA8FCA67413D,OU=Cast,O=Google Inc,L=Mountain View,ST=California,C=US</example>
403
+ <param pos="0" name="os.vendor" value="Google"/>
404
+ <param pos="0" name="os.product" value="ChromeOS"/>
405
+ <param pos="0" name="hw.device" value="Media Server"/>
406
+ <param pos="0" name="hw.vendor" value="Google"/>
407
+ <param pos="0" name="hw.product" value="Chromecast"/>
408
+ <param pos="1" name="chromecast.serial_number"/>
409
+ <!-- local administered mac address (clear bit 2 of first byte) -->
410
+ <param pos="2" name="host.mac_local"/>
411
+ </fingerprint>
412
+ <fingerprint pattern="^CN=([a-zA-Z0-9]{5,12}) ([a-zA-Z0-9]{12}),OU=Cast TV \(Vizio\),O=Google Inc,L=Mountain View,ST=California,C=US$">
413
+ <description>Vizio SmartTV (Android) with Google Cast</description>
414
+ <example chromecast.serial_number="9V039WC9" host.mac_local="FA8FCA697898">CN=9V039WC9 FA8FCA697898,OU=Cast TV (Vizio),O=Google Inc,L=Mountain View,ST=California,C=US</example>
415
+ <param pos="0" name="os.vendor" value="Google"/>
416
+ <param pos="0" name="os.cpe23" value="cpe:/o:google:android:-"/>
417
+ <param pos="0" name="os.family" value="Linux"/>
418
+ <param pos="0" name="os.product" value="Android"/>
419
+ <param pos="0" name="hw.device" value="Smart TV"/>
420
+ <param pos="0" name="hw.vendor" value="Vizio"/>
421
+ <param pos="1" name="chromecast.serial_number"/>
422
+ <!-- local administered mac address (clear bit 2 of first byte) -->
423
+ <param pos="2" name="host.mac_local"/>
424
+ </fingerprint>
425
+ <fingerprint pattern="^CN=TANDBERG,OU=R&amp;D,O=TANDBERG ASA,L=Lysaker,ST=Askerhus,C=NO$">
426
+ <description>Cisco (TANDBERG) TelePresence</description>
427
+ <example>CN=TANDBERG,OU=R&amp;D,O=TANDBERG ASA,L=Lysaker,ST=Askerhus,C=NO</example>
428
+ <param pos="0" name="hw.vendor" value="Cisco"/>
429
+ <param pos="0" name="hw.device" value="Video Conferencing"/>
430
+ <param pos="0" name="hw.product" value="TelePresence"/>
431
+ <param pos="0" name="os.vendor" value="Cisco"/>
432
+ <param pos="0" name="os.family" value="Linux"/>
433
+ <param pos="0" name="os.product" value="TelePresence"/>
434
+ <param pos="0" name="os.device" value="Video Conferencing"/>
435
+ </fingerprint>
436
+ <fingerprint pattern="^CN=lifesize.com,C=US$">
437
+ <description>Lifesize TelePresence</description>
438
+ <example>CN=lifesize.com,C=US</example>
439
+ <param pos="0" name="hw.vendor" value="Lifesize"/>
440
+ <param pos="0" name="hw.device" value="Video Conferencing"/>
441
+ <param pos="0" name="hw.product" value="TelePresence"/>
442
+ <param pos="0" name="os.vendor" value="Lifesize"/>
443
+ <param pos="0" name="os.family" value="Linux"/>
444
+ <param pos="0" name="os.product" value="TelePresence"/>
445
+ <param pos="0" name="os.device" value="Video Conferencing"/>
446
+ </fingerprint>
447
+ <fingerprint pattern="^CN=VMM APIC,OU=VMM\d+,O=Cisco,L=San Jose,ST=CA,C=US$">
448
+ <description>Cisco APIC</description>
449
+ <example>CN=VMM APIC,OU=VMM15,O=Cisco,L=San Jose,ST=CA,C=US</example>
450
+ <param pos="0" name="hw.vendor" value="Cisco"/>
451
+ <param pos="0" name="hw.product" value="APIC"/>
452
+ </fingerprint>
453
+ <fingerprint pattern="^CN=APIC$">
454
+ <description>Cisco APIC</description>
455
+ <example>CN=APIC</example>
456
+ <param pos="0" name="hw.vendor" value="Cisco"/>
457
+ <param pos="0" name="hw.product" value="APIC"/>
458
+ </fingerprint>
459
+ <fingerprint pattern="^CN=(iPX\d+),OU=I Project,O=Samsung Electronics,L=Suwon,ST=Gyeonggi-do,C=KR$">
460
+ <description>Samsung Communication Manager</description>
461
+ <example hw.product="iPX3010">CN=iPX3010,OU=I Project,O=Samsung Electronics,L=Suwon,ST=Gyeonggi-do,C=KR</example>
462
+ <param pos="0" name="hw.vendor" value="Samsung"/>
463
+ <param pos="0" name="hw.device" value="VoIP Server"/>
464
+ <param pos="0" name="hw.family" value="Communication Manager"/>
465
+ <param pos="1" name="hw.product"/>
466
+ <param pos="0" name="os.vendor" value="Samsung"/>
467
+ <param pos="0" name="os.family" value="Linux"/>
468
+ </fingerprint>
469
+ <fingerprint pattern="^CN=www.hikvision.com,OU=DVRNVR,O=HIKVISION,L=HangZhou,ST=ZheJiang,C=CN$">
470
+ <description>HIKVISION DVR</description>
471
+ <example>CN=www.hikvision.com,OU=DVRNVR,O=HIKVISION,L=HangZhou,ST=ZheJiang,C=CN</example>
472
+ <param pos="0" name="os.vendor" value="Hikvision"/>
473
+ <param pos="0" name="os.device" value="DVR"/>
474
+ <param pos="0" name="hw.vendor" value="Hikvision"/>
475
+ <param pos="0" name="hw.device" value="DVR"/>
476
+ </fingerprint>
477
+ <fingerprint pattern="^CN=([a-zA-Z0-9\.\-\_]+),OU=Polatis Switch ([a-zA-Z0-9]+),O=Polatis Inc\.,ST=N/A,C=UK$">
478
+ <description>Polatis Switch</description>
479
+ <example host.name="192.168.0.1" hw.product="1591">CN=192.168.0.1,OU=Polatis Switch 1591,O=Polatis Inc.,ST=N/A,C=UK</example>
480
+ <example host.name="central-01" hw.product="1590">CN=central-01,OU=Polatis Switch 1590,O=Polatis Inc.,ST=N/A,C=UK</example>
481
+ <param pos="0" name="os.vendor" value="Polatis"/>
482
+ <param pos="0" name="os.device" value="Switch"/>
483
+ <param pos="0" name="hw.vendor" value="Polatis"/>
484
+ <param pos="0" name="hw.device" value="Switch"/>
485
+ <param pos="1" name="host.name"/>
486
+ <param pos="2" name="hw.product"/>
487
+ </fingerprint>
488
+ <fingerprint pattern="^CN=([a-zA-Z0-9\.\-\_]+),O=Fidelis Cybersecurity$">
489
+ <description>Fidelis CommandPost</description>
490
+ <example host.name="localhost.localdomain">CN=localhost.localdomain,O=Fidelis Cybersecurity</example>
491
+ <param pos="0" name="hw.vendor" value="Fidelis"/>
492
+ <param pos="0" name="hw.product" value="CommandPost"/>
493
+ <param pos="0" name="hw.device" value="Appliance"/>
494
+ <param pos="0" name="os.vendor" value="Fidelis"/>
495
+ <param pos="0" name="os.product" value="CommandPost"/>
496
+ <param pos="1" name="host.name"/>
497
+ </fingerprint>
498
+ <fingerprint pattern="^CN=([a-zA-Z0-9]+\-[a-zA-Z0-9]+)\-([a-zA-Z0-9]+),O=IBM,L=Endicott,ST=New York,C=IN$">
499
+ <description>IBM POWER System</description>
500
+ <example hw.product="8284-22A" hw.model="211BAFW">CN=8284-22A-211BAFW,O=IBM,L=Endicott,ST=New York,C=IN</example>
501
+ <param pos="0" name="hw.vendor" value="IBM"/>
502
+ <param pos="0" name="hw.family" value="POWER System"/>
503
+ <param pos="1" name="hw.product" value=""/>
504
+ <param pos="2" name="hw.model"/>
505
+ </fingerprint>
506
+ <fingerprint pattern="^CN=EagleEyeDirectorII.polycom.com,OU=Video Division,O=Polycom Inc.,L=San Jose,ST=California,C=US$">
507
+ <description>Polycom Eagle Eye Director</description>
508
+ <example>CN=EagleEyeDirectorII.polycom.com,OU=Video Division,O=Polycom Inc.,L=San Jose,ST=California,C=US</example>
509
+ <param pos="0" name="hw.vendor" value="Polycom"/>
510
+ <param pos="0" name="hw.device" value="Video Conferencing"/>
511
+ <param pos="0" name="hw.product" value="Eagle Eye Director II"/>
512
+ </fingerprint>
513
+ <fingerprint pattern="^CN=([a-zA-Z0-9]+),OU=RD,O=QSC\\, LLC,ST=Colorado,C=US$">
514
+ <description>Q-SYS Licensing Manager</description>
515
+ <example host.name="SVRTIP44">CN=SVRTIP44,OU=RD,O=QSC\, LLC,ST=Colorado,C=US</example>
516
+ <param pos="0" name="service.vendor" value="Q-SYS"/>
517
+ <param pos="0" name="service.product" value="Licensing Manager"/>
518
+ <param pos="1" name="host.name"/>
519
+ </fingerprint>
520
+ <fingerprint pattern="^CN=([A-Za-z0-9]+),OU=FortiGate,O=Fortinet,L=Sunnyvale,ST=California,C=US$">
521
+ <description>Fortinet Gateway</description>
522
+ <example fortinet.serial_number="FG100ETK1800118">CN=FG100ETK1800118,OU=FortiGate,O=Fortinet,L=Sunnyvale,ST=California,C=US</example>
523
+ <example fortinet.serial_number="FGT30D3X15038375">CN=FGT30D3X15038375,OU=FortiGate,O=Fortinet,L=Sunnyvale,ST=California,C=US</example>
524
+ <param pos="0" name="hw.vendor" value="Fortinet"/>
525
+ <param pos="0" name="hw.device" value="Firewall"/>
526
+ <param pos="0" name="os.vendor" value="Fortinet"/>
527
+ <param pos="0" name="os.cpe23" value="cpe:/o:fortinet:fortios:-"/>
528
+ <param pos="0" name="os.family" value="Linux"/>
529
+ <param pos="0" name="os.device" value="Firewall"/>
530
+ <param pos="0" name="os.product" value="FortiOS"/>
531
+ <param pos="1" name="fortinet.serial_number"/>
532
+ </fingerprint>
533
+ <fingerprint pattern="^CN=([A-Za-z0-9]+),O=Fortinet Ltd\.$">
534
+ <description>Fortinet Gateway (Older)</description>
535
+ <example fortinet.serial_number="FG100D3G13803999">CN=FG100D3G13803999,O=Fortinet Ltd.</example>
536
+ <param pos="0" name="hw.vendor" value="Fortinet"/>
537
+ <param pos="0" name="hw.device" value="Firewall"/>
538
+ <param pos="0" name="os.vendor" value="Fortinet"/>
539
+ <param pos="0" name="os.cpe23" value="cpe:/o:fortinet:fortios:-"/>
540
+ <param pos="0" name="os.family" value="Linux"/>
541
+ <param pos="0" name="os.device" value="Firewall"/>
542
+ <param pos="0" name="os.product" value="FortiOS"/>
543
+ <param pos="1" name="fortinet.serial_number"/>
544
+ </fingerprint>
545
+ <fingerprint pattern="^CN=FortiMail,OU=FortiMail,O=Fortinet,L=Sunnyvale,ST=California,C=US$">
546
+ <description>Fortinet FortiMail Appliance</description>
547
+ <example>CN=FortiMail,OU=FortiMail,O=Fortinet,L=Sunnyvale,ST=California,C=US</example>
548
+ <param pos="0" name="hw.vendor" value="Fortinet"/>
549
+ <param pos="0" name="hw.device" value="Appliance"/>
550
+ <param pos="0" name="hw.product" value="FortiMail"/>
551
+ <param pos="0" name="os.vendor" value="Fortinet"/>
552
+ <param pos="0" name="os.cpe23" value="cpe:/o:fortinet:fortios:-"/>
553
+ <param pos="0" name="os.family" value="Linux"/>
554
+ <param pos="0" name="os.product" value="FortiOS"/>
555
+ <param pos="0" name="os.device" value="Appliance"/>
556
+ </fingerprint>
557
+ <fingerprint pattern="^CN=.*,OU=FortiManager,O=Fortinet,L=Sunnyvale,ST=California,C=US$">
558
+ <description>Fortinet FortiMail Appliance</description>
559
+ <example>CN=FMG-VM0000000000,OU=FortiManager,O=Fortinet,L=Sunnyvale,ST=California,C=US</example>
560
+ <param pos="0" name="hw.vendor" value="Fortinet"/>
561
+ <param pos="0" name="hw.device" value="Appliance"/>
562
+ <param pos="0" name="hw.product" value="FortiManager"/>
563
+ <param pos="0" name="os.vendor" value="Fortinet"/>
564
+ <param pos="0" name="os.cpe23" value="cpe:/o:fortinet:fortios:-"/>
565
+ <param pos="0" name="os.family" value="Linux"/>
566
+ <param pos="0" name="os.product" value="FortiOS"/>
567
+ <param pos="0" name="os.device" value="Appliance"/>
568
+ </fingerprint>
569
+ <fingerprint pattern="^CN=CyberoamApplianceCertificate">
570
+ <description>Cyberoam SSL VPN</description>
571
+ <example>CN=CyberoamApplianceCertificate_C35316263111,OU=Cyberoam Appliance,O=Cyberoam,L=Ahmedabad,ST=Gujarat,C=IN</example>
572
+ <example>CN=CyberoamApplianceCertificate,OU=Cyberoam Appliance,O=Cyberoam,L=Ahmedabad,ST=Gujarat,C=IN</example>
573
+ <param pos="0" name="hw.vendor" value="Cyberoam"/>
574
+ <param pos="0" name="hw.device" value="VPN"/>
575
+ <param pos="0" name="hw.product" value="Appliance"/>
576
+ <param pos="0" name="os.vendor" value="Cyberoam"/>
577
+ <param pos="0" name="os.device" value="VPN"/>
578
+ </fingerprint>
579
+ <fingerprint pattern="^CN=UBNT\-([0-9a-fA-F]{2}:[0-9a-fA-F]{2}:[0-9a-fA-F]{2}:[0-9a-fA-F]{2}:[0-9a-fA-F]{2}:[0-9a-fA-F]{2}),OU=Technical Support,O=Ubiquiti Networks Inc.,L=San Jose,ST=CA,C=US$">
580
+ <description>Ubiquiti Wireless AP</description>
581
+ <example host.mac="68:72:51:4B:90:16">CN=UBNT-68:72:51:4B:90:16,OU=Technical Support,O=Ubiquiti Networks Inc.,L=San Jose,ST=CA,C=US</example>
582
+ <param pos="0" name="hw.vendor" value="Ubiquiti"/>
583
+ <param pos="0" name="hw.device" value="WAP"/>
584
+ <param pos="0" name="os.vendor" value="Ubiquiti"/>
585
+ <param pos="0" name="os.family" value="Linux"/>
586
+ <param pos="0" name="os.device" value="WAP"/>
587
+ <param pos="1" name="host.mac"/>
588
+ </fingerprint>
589
+ <fingerprint pattern="^CN=unifi$">
590
+ <description>Ubiquiti Controller</description>
591
+ <example>CN=unifi</example>
592
+ <param pos="0" name="hw.vendor" value="Ubiquiti"/>
593
+ <param pos="0" name="hw.device" value="Wireless Controller"/>
594
+ <param pos="0" name="os.vendor" value="Ubiquiti"/>
595
+ <param pos="0" name="os.family" value="Linux"/>
596
+ <param pos="0" name="os.device" value="Wireless Controller"/>
597
+ </fingerprint>
598
+ <fingerprint pattern="^CN=UniFi,OU=UniFi,O=ubnt\.com,L=San Jose,ST=CA,C=US$">
599
+ <description>Ubiquiti Controller</description>
600
+ <example>CN=UniFi,OU=UniFi,O=ubnt.com,L=San Jose,ST=CA,C=US</example>
601
+ <param pos="0" name="hw.vendor" value="Ubiquiti"/>
602
+ <param pos="0" name="hw.device" value="Wireless Controller"/>
603
+ <param pos="0" name="os.vendor" value="Ubiquiti"/>
604
+ <param pos="0" name="os.family" value="Linux"/>
605
+ <param pos="0" name="os.device" value="Wireless Controller"/>
606
+ </fingerprint>
607
+ <fingerprint pattern="^CN=UBNT,OU=Technical Support,O=Ubiquiti Networks Inc\.,L=San Jose,ST=CA,C=US$">
608
+ <description>Ubiquiti Controller</description>
609
+ <example>CN=UBNT,OU=Technical Support,O=Ubiquiti Networks Inc.,L=San Jose,ST=CA,C=US</example>
610
+ <param pos="0" name="hw.vendor" value="Ubiquiti"/>
611
+ <param pos="0" name="hw.device" value="Wireless Controller"/>
612
+ <param pos="0" name="os.vendor" value="Ubiquiti"/>
613
+ <param pos="0" name="os.family" value="Linux"/>
614
+ <param pos="0" name="os.device" value="Wireless Controller"/>
615
+ </fingerprint>
616
+ <fingerprint pattern="^CN=CloudKey,O=Ubiquiti Networks,L=San Jose,ST=CA,C=US$">
617
+ <description>Ubiquiti CloudKey Controller</description>
618
+ <example>CN=CloudKey,O=Ubiquiti Networks,L=San Jose,ST=CA,C=US</example>
619
+ <param pos="0" name="hw.vendor" value="Ubiquiti"/>
620
+ <param pos="0" name="hw.device" value="Wireless Controller"/>
621
+ <param pos="0" name="hw.product" value="CloudKey"/>
622
+ <param pos="0" name="os.vendor" value="Ubiquiti"/>
623
+ <param pos="0" name="os.family" value="Linux"/>
624
+ <param pos="0" name="os.device" value="Wireless Controller"/>
625
+ <param pos="0" name="os.product" value="CloudKey"/>
626
+ </fingerprint>
627
+ <fingerprint pattern="^CN=UBNT Router UI,O=Ubiquiti Networks,L=San Jose,ST=CA,C=US$">
628
+ <description>Ubiquiti Router</description>
629
+ <example>CN=UBNT Router UI,O=Ubiquiti Networks,L=San Jose,ST=CA,C=US</example>
630
+ <param pos="0" name="hw.vendor" value="Ubiquiti"/>
631
+ <param pos="0" name="hw.device" value="Router"/>
632
+ <param pos="0" name="os.vendor" value="Ubiquiti"/>
633
+ <param pos="0" name="os.family" value="Linux"/>
634
+ <param pos="0" name="os.device" value="Router"/>
635
+ </fingerprint>
636
+ <fingerprint pattern="^CN=UniFi-Video Controller,OU=R&amp;D,O=Ubiquiti Networks,L=New York,ST=NY,C=US$">
637
+ <description>Ubiquiti Video Controller</description>
638
+ <example>CN=UniFi-Video Controller,OU=R&amp;D,O=Ubiquiti Networks,L=New York,ST=NY,C=US</example>
639
+ <param pos="0" name="hw.vendor" value="Ubiquiti"/>
640
+ <param pos="0" name="hw.device" value="DVR"/>
641
+ <param pos="0" name="hw.product" value="Video Controller"/>
642
+ <param pos="0" name="os.vendor" value="Ubiquiti"/>
643
+ <param pos="0" name="os.family" value="Linux"/>
644
+ <param pos="0" name="os.device" value="DVR"/>
645
+ </fingerprint>
646
+ <fingerprint pattern="^CN=camera.ubnt.dev,OU=devint,O=Ubiquiti Networks Inc.,L=Taipei,C=TW$">
647
+ <description>Ubiquiti Video Camera</description>
648
+ <example>CN=camera.ubnt.dev,OU=devint,O=Ubiquiti Networks Inc.,L=Taipei,C=TW</example>
649
+ <param pos="0" name="hw.vendor" value="Ubiquiti"/>
650
+ <param pos="0" name="hw.device" value="Web Cam"/>
651
+ <param pos="0" name="hw.product" value="Camera"/>
652
+ <param pos="0" name="os.vendor" value="Ubiquiti"/>
653
+ <param pos="0" name="os.family" value="Linux"/>
654
+ <param pos="0" name="os.device" value="Web Cam"/>
655
+ </fingerprint>
656
+ <fingerprint pattern="^CN=GreenWave Systems,OU=PKI,O=GreenWave Systems,L=Irvine,ST=California,C=US$">
657
+ <description>Verizon / Greenwave FIOS Router</description>
658
+ <example>CN=GreenWave Systems,OU=PKI,O=GreenWave Systems,L=Irvine,ST=California,C=US</example>
659
+ <param pos="0" name="hw.vendor" value="Greenwave Systems"/>
660
+ <param pos="0" name="hw.device" value="Broadband Router"/>
661
+ <param pos="0" name="hw.product" value="Verizon FiOS Router"/>
662
+ </fingerprint>
663
+ <fingerprint pattern="^CN=PoliWall,OU=Bandura Labs,O=Bandura\\, LLC\.,L=Lake Saint Louis,ST=Missouri,C=US$">
664
+ <description>PoliWall Firewall</description>
665
+ <example>CN=PoliWall,OU=Bandura Labs,O=Bandura\, LLC.,L=Lake Saint Louis,ST=Missouri,C=US</example>
666
+ <param pos="0" name="hw.vendor" value="Bandura Labs"/>
667
+ <param pos="0" name="hw.device" value="Firewall"/>
668
+ <param pos="0" name="hw.product" value="PoliWall"/>
669
+ </fingerprint>
670
+ <fingerprint pattern="^CN=pfSense-[a-zA-Z0-9]+,O=pfSense webConfigurator Self-Signed Certificate">
671
+ <description>pfSense Firewall</description>
672
+ <example>CN=pfSense-58fb5b0b06777,O=pfSense webConfigurator Self-Signed Certificate,L=Locality,ST=State,C=US</example>
673
+ <example>CN=pfSense-5c76251e4d3e4,O=pfSense webConfigurator Self-Signed Certificate</example>
674
+ <param pos="0" name="hw.vendor" value="pfSense"/>
675
+ <param pos="0" name="hw.device" value="Firewall"/>
676
+ <param pos="0" name="hw.product" value="Firewall"/>
677
+ <param pos="0" name="os.vendor" value="pfSense"/>
678
+ <param pos="0" name="os.product" value="FreeBSD"/>
679
+ </fingerprint>
680
+ <fingerprint pattern="^CN=SophosApplianceCertificate">
681
+ <description>Sophos Appliance</description>
682
+ <example>CN=SophosApplianceCertificate_C330AC22W713PAF,OU=OU,O=Green House Data,L=Cheyenne,ST=WY,C=US</example>
683
+ <example>CN=SophosApplianceCertificate_C22315405928-UU5JKO,OU=OU,O=(null),L=NA,ST=NA,C=PK</example>
684
+ <example>CN=SophosApplianceCertificate,OU=OU,O=Sophos,L=Abingdon,ST=Oxfordshire,C=GB</example>
685
+ <param pos="0" name="hw.vendor" value="Sophos"/>
686
+ <param pos="0" name="hw.device" value="Appliance"/>
687
+ </fingerprint>
688
+ <fingerprint pattern="^CN=Hubitat Elevation,OU=Hub,O=Hubitat\\, Inc\.,L=Scottsdale,ST=Arizona,C=US$">
689
+ <description>Hubitat Device Hub</description>
690
+ <example>CN=Hubitat Elevation,OU=Hub,O=Hubitat\, Inc.,L=Scottsdale,ST=Arizona,C=US</example>
691
+ <param pos="0" name="hw.vendor" value="Hubitat"/>
692
+ <param pos="0" name="hw.device" value="Device Hub"/>
693
+ <param pos="0" name="hw.product" value="Elevation"/>
694
+ <param pos="0" name="os.vendor" value="Hubitat"/>
695
+ <param pos="0" name="os.product" value="Linux"/>
696
+ </fingerprint>
697
+ <fingerprint pattern="^CN=MAC([a-fA-F0-9]{12}),OU=([^,]+),O=Mercury Security Products\\, LLC,L=Long Beach,ST=CA,C=US$">
698
+ <description>Mercurity Security (now HID Global)</description>
699
+ <example hw.product="M5IC" host.mac="000FE507A1F1">CN=MAC000FE507A1F1,OU=M5IC,O=Mercury Security Products\, LLC,L=Long Beach,ST=CA,C=US</example>
700
+ <example hw.product="EP-1502" host.mac="000FE508BC71">CN=MAC000FE508BC71,OU=EP-1502,O=Mercury Security Products\, LLC,L=Long Beach,ST=CA,C=US</example>
701
+ <param pos="0" name="hw.vendor" value="Mercury Security"/>
702
+ <param pos="0" name="hw.device" value="Access Controller"/>
703
+ <param pos="1" name="host.mac"/>
704
+ <param pos="2" name="hw.product"/>
705
+ </fingerprint>
706
+ <fingerprint pattern="^CN=securelogin.arubanetworks.com,">
707
+ <description>Aruba Wireless Controller</description>
708
+ <example>CN=securelogin.arubanetworks.com,O=Aruba Networks,C=US</example>
709
+ <example>CN=securelogin.arubanetworks.com,OU=Instant,O=Aruba Networks,L=Sunnyvale,ST=California,C=US</example>
710
+ <param pos="0" name="hw.vendor" value="Aruba Networks"/>
711
+ <param pos="0" name="hw.device" value="Wireless Controller"/>
712
+ <param pos="0" name="hw.product" value="Captive Portal"/>
713
+ </fingerprint>
714
+ <fingerprint pattern="^CN=Fireware web CA,OU=Fireware,O=WatchGuard$">
715
+ <description>WatchGuard Firewall</description>
716
+ <example>CN=Fireware web CA,OU=Fireware,O=WatchGuard</example>
717
+ <param pos="0" name="hw.vendor" value="WatchGuard"/>
718
+ <param pos="0" name="hw.device" value="Firewall"/>
719
+ <param pos="0" name="os.vendor" value="WatchGuard"/>
720
+ <param pos="0" name="os.cpe23" value="cpe:/o:watchguard:fireware:-"/>
721
+ <param pos="0" name="os.product" value="Fireware"/>
722
+ </fingerprint>
723
+ <fingerprint pattern="^CN=[0-9\.]+,OU=SSL-VPN,O=SonicWALL\\, Inc\.,L=Sunnyvale,ST=CA,C=US$">
724
+ <description>SonicWALL Firewall</description>
725
+ <example>CN=192.168.200.1,OU=SSL-VPN,O=SonicWALL\, Inc.,L=Sunnyvale,ST=CA,C=US</example>
726
+ <param pos="0" name="hw.vendor" value="SonicWALL"/>
727
+ <param pos="0" name="hw.device" value="VPN"/>
728
+ <param pos="0" name="os.vendor" value="SonicWALL"/>
729
+ <param pos="0" name="os.product" value="VPN"/>
730
+ <param pos="0" name="os.family" value="VPN"/>
731
+ </fingerprint>
732
+ <fingerprint pattern="^CN=.*\.akamai\.net,O=Akamai Technologies\\, Inc\.,L=Cambridge,ST=Massachusetts,C=US$">
733
+ <description>Akamai Global Host</description>
734
+ <example>CN=a248.e.akamai.net,O=Akamai Technologies\, Inc.,L=Cambridge,ST=Massachusetts,C=US</example>
735
+ <param pos="0" name="service.vendor" value="Akamai"/>
736
+ <param pos="0" name="service.product" value="GHost"/>
737
+ <param pos="0" name="os.vendor" value="Akamai"/>
738
+ <param pos="0" name="os.device" value="Web proxy"/>
739
+ </fingerprint>
740
+ <fingerprint pattern="^CN=HP_3PAR_">
741
+ <description>HP 3PAR</description>
742
+ <example>CN=HP_3PAR_1626615</example>
743
+ <example>CN=HP_3PAR_CZ3601VYFJ</example>
744
+ <param pos="0" name="hw.vendor" value="HP"/>
745
+ <param pos="0" name="hw.device" value="Storage"/>
746
+ <param pos="0" name="hw.product" value="3PAR"/>
747
+ </fingerprint>
748
+ <fingerprint pattern="^CN=(?:alienvault|VirtualUSMAllInOne)$">
749
+ <description>Alienvault OSSIM</description>
750
+ <example>CN=alienvault</example>
751
+ <example>CN=VirtualUSMAllInOne</example>
752
+ <param pos="0" name="os.vendor" value="AlienVault"/>
753
+ <param pos="0" name="os.device" value="Appliance"/>
754
+ <param pos="0" name="os.product" value="OSSIM"/>
755
+ <param pos="0" name="os.family" value="Linux"/>
756
+ </fingerprint>
757
+ <fingerprint pattern="^CN=Canon (iR-[a-zA-Z0-9\.\-\_]+)$">
758
+ <description>Canon iR-ADV Printer</description>
759
+ <example os.product="iR-ADV">CN=Canon iR-ADV</example>
760
+ <param pos="0" name="hw.device" value="Printer"/>
761
+ <param pos="0" name="hw.vendor" value="Canon"/>
762
+ <param pos="0" name="os.device" value="Printer"/>
763
+ <param pos="0" name="os.vendor" value="Canon"/>
764
+ <param pos="1" name="hw.product"/>
765
+ <param pos="1" name="os.product"/>
766
+ </fingerprint>
767
+ <fingerprint pattern="^CN=Canon Imaging Product$">
768
+ <description>Canon iR-ADV Printer</description>
769
+ <example>CN=Canon Imaging Product</example>
770
+ <param pos="0" name="hw.device" value="Printer"/>
771
+ <param pos="0" name="hw.vendor" value="Canon"/>
772
+ <param pos="0" name="os.device" value="Printer"/>
773
+ <param pos="0" name="os.vendor" value="Canon"/>
774
+ </fingerprint>
775
+ <fingerprint pattern="^CN=tnsappliance.*,O=Tenable Network Security\\, Inc\.,L=Columbia,ST=Maryland,C=US$">
776
+ <description>Tenable Appliance</description>
777
+ <example>CN=tnsappliance-b088a321,OU=--,O=Tenable Network Security\, Inc.,L=Columbia,ST=Maryland,C=US</example>
778
+ <example>CN=tnsappliance,OU=--,O=Tenable Network Security\, Inc.,L=Columbia,ST=Maryland,C=US</example>
779
+ <param pos="0" name="hw.device" value="Appliance"/>
780
+ <param pos="0" name="hw.vendor" value="Tenable"/>
781
+ <param pos="0" name="hw.product" value="Tenable Core"/>
782
+ <param pos="0" name="os.device" value="Appliance"/>
783
+ <param pos="0" name="os.vendor" value="Tenable"/>
784
+ <param pos="0" name="os.product" value="Tenable Core"/>
785
+ </fingerprint>
786
+ <fingerprint pattern="^CN=extrahop,OU=extrahop\.com,O=ExtraHop,C=US$">
787
+ <description>ExtraHop Appliance</description>
788
+ <example>CN=extrahop,OU=extrahop.com,O=ExtraHop,C=US</example>
789
+ <param pos="0" name="hw.device" value="Appliance"/>
790
+ <param pos="0" name="hw.vendor" value="ExtraHop"/>
791
+ <param pos="0" name="hw.product" value="Discover"/>
792
+ <param pos="0" name="os.device" value="Appliance"/>
793
+ <param pos="0" name="os.vendor" value="ExtraHop"/>
794
+ <param pos="0" name="os.product" value="Discover"/>
795
+ </fingerprint>
796
+ <fingerprint pattern="^CN=Ruckus Wireless ZoneDirector SN-(\d+),O=Ruckus Wireless\\, Inc\.,ST=CA,C=US$">
797
+ <description>Ruckus Zone Director</description>
798
+ <example ruckus.serial_number="221301007591">CN=Ruckus Wireless ZoneDirector SN-221301007591,O=Ruckus Wireless\, Inc.,ST=CA,C=US</example>
799
+ <param pos="0" name="hw.device" value="Wireless Controller"/>
800
+ <param pos="0" name="hw.vendor" value="Ruckus"/>
801
+ <param pos="0" name="hw.product" value="Zone Director"/>
802
+ <param pos="0" name="os.device" value="Wireless Controller"/>
803
+ <param pos="0" name="os.vendor" value="Ruckus"/>
804
+ <param pos="0" name="os.product" value="Zone Director"/>
805
+ <param pos="1" name="ruckus.serial_number"/>
806
+ </fingerprint>
807
+ <fingerprint pattern="^CN=DT([^\s]+) Series,O=NEC Corporation,ST=Tokyo,C=JP$">
808
+ <description>NEC DT Series IP Phone</description>
809
+ <example>CN=DT800 Series,O=NEC Corporation,ST=Tokyo,C=JP</example>
810
+ <param pos="0" name="os.vendor" value="NEC"/>
811
+ <param pos="0" name="os.device" value="IP Phone"/>
812
+ <param pos="0" name="hw.vendor" value="NEC"/>
813
+ <param pos="0" name="hw.device" value="IP Phone"/>
814
+ <param pos="1" name="hw.product"/>
815
+ </fingerprint>
816
+ <fingerprint pattern="^CN=([a-fA-F0-9]{12}),O=Polycom Inc\.$">
817
+ <description>NEC DT Series IP Phone</description>
818
+ <example host.mac="64167F169981">CN=64167F169981,O=Polycom Inc.</example>
819
+ <param pos="0" name="os.vendor" value="Polycom"/>
820
+ <param pos="0" name="os.device" value="IP Phone"/>
821
+ <param pos="0" name="hw.vendor" value="Polycom"/>
822
+ <param pos="0" name="hw.device" value="IP Phone"/>
823
+ <param pos="0" name="hw.product" value="SoundPoint"/>
824
+ <param pos="1" name="host.mac"/>
825
+ </fingerprint>
826
+ <fingerprint pattern="^CN=EN Software Production &amp; Release,OU=Enterprise Networks,O=Siemens AG,L=Munich,ST=Germany,C=DE$">
827
+ <description>Siemens EN Software</description>
828
+ <example>CN=EN Software Production &amp; Release,OU=Enterprise Networks,O=Siemens AG,L=Munich,ST=Germany,C=DE</example>
829
+ <param pos="0" name="os.vendor" value="Siemens"/>
830
+ <param pos="0" name="os.device" value="IP Phone"/>
831
+ <param pos="0" name="hw.vendor" value="Siemens"/>
832
+ <param pos="0" name="hw.device" value="IP Phone"/>
833
+ </fingerprint>
834
+ <fingerprint pattern="^CN=SecureConnect server,O=Quest,ST=CA,C=US$">
835
+ <description>SecureConnect SSL VPN</description>
836
+ <example>CN=SecureConnect server,O=Quest,ST=CA,C=US</example>
837
+ <param pos="0" name="hw.vendor" value="SecureConnect"/>
838
+ <param pos="0" name="hw.device" value="VPN"/>
839
+ <param pos="0" name="os.vendor" value="SecureConnect"/>
840
+ <param pos="0" name="os.device" value="VPN"/>
841
+ </fingerprint>
842
+ <fingerprint pattern="^CN=RecoverPoint,OU=Data Protection and Availability Division,O=EMC Corporation,L=Hopkinton,ST=Massachusetts,C=US$">
843
+ <description>RecoverPoint Appliance</description>
844
+ <example>CN=RecoverPoint,OU=Data Protection and Availability Division,O=EMC Corporation,L=Hopkinton,ST=Massachusetts,C=US</example>
845
+ <param pos="0" name="hw.device" value="Appliance"/>
846
+ <param pos="0" name="hw.vendor" value="EMC"/>
847
+ <param pos="0" name="hw.product" value="RecoverPoint"/>
848
+ <param pos="0" name="os.device" value="Appliance"/>
849
+ <param pos="0" name="os.vendor" value="EMC"/>
850
+ <param pos="0" name="os.product" value="RecoverPoint"/>
851
+ </fingerprint>
852
+ <fingerprint pattern="^CN=[a-fA-F0-9]+,O=Palo Alto Networks,L=Santa Clara,ST=CA,C=US$">
853
+ <description>Palo Alto Firewall</description>
854
+ <example>CN=d9fc2294968367a3a8ad1acd4c816c78444e6ea4d69869b40cc9751951fd3693,O=Palo Alto Networks,L=Santa Clara,ST=CA,C=US</example>
855
+ <param pos="0" name="hw.vendor" value="Palo Alto Networks"/>
856
+ <param pos="0" name="hw.device" value="Firewall"/>
857
+ <param pos="0" name="os.vendor" value="Palo Alto Networks"/>
858
+ <param pos="0" name="os.product" value="PANOS"/>
859
+ <param pos="0" name="os.device" value="Firewall"/>
860
+ </fingerprint>
861
+ <fingerprint pattern="^CN=VMware default certificate,OU=vCenterServer.*,O=VMware\\, Inc\.$">
862
+ <description>VMWare vCenter</description>
863
+ <example>CN=VMware default certificate,OU=vCenterServer_2013.09.26_220623,O=VMware\, Inc.</example>
864
+ <param pos="0" name="service.vendor" value="VMWare"/>
865
+ <param pos="0" name="service.product" value="vCenter"/>
866
+ </fingerprint>
867
+ <fingerprint pattern="^CN=selfappliance,OU=Engineering,O=Symplified,L=Boulder,ST=Colorado,C=US$">
868
+ <description>Symplified IAM Appliance (now RSA)</description>
869
+ <example>CN=selfappliance,OU=Engineering,O=Symplified,L=Boulder,ST=Colorado,C=US</example>
870
+ <param pos="0" name="hw.vendor" value="Symplified"/>
871
+ <param pos="0" name="hw.device" value="Appliance"/>
872
+ <param pos="0" name="hw.product" value="IAM"/>
873
+ </fingerprint>
874
+ <fingerprint pattern="^CN=OpenWrt,L=Leipzig,ST=Saxony,C=DE$">
875
+ <description>OpenWRT WAP</description>
876
+ <example>CN=OpenWrt,L=Leipzig,ST=Saxony,C=DE</example>
877
+ <param pos="0" name="os.vendor" value="OpenWRT"/>
878
+ <param pos="0" name="os.device" value="WAP"/>
879
+ </fingerprint>
880
+ <fingerprint pattern="^CN=axis-([a-fA-F0-9]{12}),O=Axis Communications AB$">
881
+ <description>OpenWRT WAP</description>
882
+ <example host.mac="accc8ea31abf">CN=axis-accc8ea31abf,O=Axis Communications AB</example>
883
+ <param pos="0" name="hw.vendor" value="AXIS"/>
884
+ <param pos="0" name="hw.device" value="Web Cam"/>
885
+ <param pos="0" name="os.vendor" value="AXIS"/>
886
+ <param pos="0" name="os.device" value="Web Cam"/>
887
+ <param pos="0" name="os.family" value="Linux"/>
888
+ <param pos="1" name="host.mac"/>
889
+ </fingerprint>
890
+ <fingerprint pattern="^CN=Dell_OpenManage.*,OU=PG,O=Dell Inc\.,ST=Texas,C=US$">
891
+ <description>Dell OpenManage</description>
892
+ <example>CN=Dell_OpenManage01,OU=PG,O=Dell Inc.,ST=Texas,C=US</example>
893
+ <param pos="0" name="hw.vendor" value="Dell"/>
894
+ <param pos="0" name="hw.device" value="Appliance"/>
895
+ <param pos="0" name="hw.product" value="OpenManage"/>
896
+ <param pos="0" name="os.vendor" value="Dell"/>
897
+ <param pos="0" name="os.device" value="Appliance"/>
898
+ <param pos="0" name="os.family" value="Linux"/>
899
+ </fingerprint>
900
+ <fingerprint pattern="^CN=Equallogic PS Array,OU=Dell Equallogic,O=Dell Inc\.,L=Nashua,ST=New Hampshire,C=US$">
901
+ <description>Dell EqualLogic PS Array</description>
902
+ <example>CN=Equallogic PS Array,OU=Dell Equallogic,O=Dell Inc.,L=Nashua,ST=New Hampshire,C=US</example>
903
+ <param pos="0" name="hw.vendor" value="Dell"/>
904
+ <param pos="0" name="hw.device" value="Storage"/>
905
+ <param pos="0" name="hw.product" value="EqualLogic"/>
906
+ <param pos="0" name="os.vendor" value="Dell"/>
907
+ <param pos="0" name="os.device" value="Storage"/>
908
+ <param pos="0" name="os.product" value="EqualLogic"/>
909
+ </fingerprint>
910
+ <fingerprint pattern="^CN=opennac\.test,L=Madrid,ST=Madrid,C=ES$">
911
+ <description>OpenNAC Appliance</description>
912
+ <example>CN=opennac.test,L=Madrid,ST=Madrid,C=ES</example>
913
+ <param pos="0" name="hw.vendor" value="OpenNAC"/>
914
+ <param pos="0" name="hw.device" value="Appliance"/>
915
+ <param pos="0" name="hw.product" value="OpenNAC"/>
916
+ <param pos="0" name="os.vendor" value="OpenNAC"/>
917
+ <param pos="0" name="os.family" value="Linux"/>
918
+ <param pos="0" name="os.product" value="Linux"/>
919
+ </fingerprint>
920
+ <fingerprint pattern="^CN=SmartEdge Sensor,O=AirMagnet,L=Sunnyvale,ST=California,C=US$">
921
+ <description>AirMagnet SmartEdge Sensor</description>
922
+ <example>CN=SmartEdge Sensor,O=AirMagnet,L=Sunnyvale,ST=California,C=US</example>
923
+ <param pos="0" name="hw.vendor" value="AirMagnet"/>
924
+ <param pos="0" name="hw.device" value="Wireless Controller"/>
925
+ <param pos="0" name="hw.product" value="SmartEdge Sensor"/>
926
+ </fingerprint>
927
+ <fingerprint pattern="^CN=Sensor WebUI,O=AirDefense Inc.,L=Alpharetta,ST=GA,C=US$">
928
+ <description>AirDefense Inc Sensor</description>
929
+ <example>CN=Sensor WebUI,O=AirDefense Inc.,L=Alpharetta,ST=GA,C=US</example>
930
+ <param pos="0" name="hw.vendor" value="AirDefense"/>
931
+ <param pos="0" name="hw.device" value="Wireless Controller"/>
932
+ <param pos="0" name="hw.product" value="Sensor"/>
933
+ </fingerprint>
934
+ <fingerprint pattern="^CN=(usg[^_]+)_([a-fA-F0-9]{12})$">
935
+ <description>ZyWall Router</description>
936
+ <example hw.product="usg20w" host.mac="5CF4AB615FAC">CN=usg20w_5CF4AB615FAC</example>
937
+ <example hw.product="usg20w" host.mac="5067F0BC1D3C">CN=usg20w_5067F0BC1D3C</example>
938
+ <example hw.product="usg20" host.mac="107BEF0AD201">CN=usg20_107BEF0AD201</example>
939
+ <param pos="0" name="hw.vendor" value="ZyWall"/>
940
+ <param pos="0" name="hw.device" value="Broadband Router"/>
941
+ <param pos="1" name="hw.product"/>
942
+ <param pos="2" name="host.mac"/>
943
+ </fingerprint>
944
+ <fingerprint pattern="^CN=([a-fA-F0-9]{16}),O=Philips Hue,C=NL$">
945
+ <description>Philips Hue Personal Wireless Lighting</description>
946
+ <example host.mac_eui64="001788fffe4f1999">CN=001788fffe4f1999,O=Philips Hue,C=NL</example>
947
+ <param pos="0" name="hw.vendor" value="Philips"/>
948
+ <param pos="0" name="hw.product" value="Hue"/>
949
+ <param pos="0" name="hw.device" value="Light Bulb"/>
950
+ <param pos="1" name="host.mac_eui64"/>
951
+ </fingerprint>
952
+ </fingerprints>
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: recog
3
3
  version: !ruby/object:Gem::Version
4
- version: 2.2.1
4
+ version: 2.3.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Rapid7 Research
8
8
  autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2019-03-01 00:00:00.000000000 Z
11
+ date: 2019-04-10 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: rspec
@@ -229,6 +229,8 @@ files:
229
229
  - xml/ssh_banners.xml
230
230
  - xml/telnet_banners.xml
231
231
  - xml/x11_banners.xml
232
+ - xml/x509_issuers.xml
233
+ - xml/x509_subjects.xml
232
234
  homepage: https://www.github.com/rapid7/recog
233
235
  licenses: []
234
236
  metadata: {}
@@ -248,7 +250,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
248
250
  version: '0'
249
251
  requirements: []
250
252
  rubyforge_project:
251
- rubygems_version: 2.5.2
253
+ rubygems_version: 2.6.11
252
254
  signing_key:
253
255
  specification_version: 4
254
256
  summary: Network service fingerprint database, classes, and utilities