Heartbleed Bundle, DE Compatible

bundle

#1

###Bundle details and download
https://www.extrahop.com/bundles/blood/heartbleed-de-compatible/

###Description
I think we’ve all read about the Heartbleed SSL/TLS Vulnerability by now. Getting an ExtraHop Discovery Edition appliance to detect attempts at exploiting this isn’t difficult, and so I made a bundle to do just that. This bundle adds an AI Trigger to record whenever a TLS Heartbeat record is observed and to store the client IP and the Common Name from the x509 cert so you know where it came from and for what it was destined.