1id: tlsa-fingerprinting 2 3info: 4 name: TLSA Fingerprint 5 author: pdteam 6 severity: info 7 tags: dns,tlsa 8 9dns: 10 - name: "{{FQDN}}" 11 type: TLSA 12 13 matchers: 14 - type: word 15 words: 16 - "IN\tTLSA" 17 18 extractors: 19 - type: regex 20 group: 1 21 regex: 22 - "IN\tTLSA\t(.+)" 23