Omron FINS Parser

[athomsen115]

💡 Summary

What is the work, as a high-level summary?
Can you add a new parser for Omron FINS

Motivation and context

Why does this work belong in this project?
Based on the PIPEDREAM malware and if malware is starting to target Omron, I would like to be able to parse that in Security Onion. I am able to review the traffic in Wireshark, but that can only process so much data at a time and is hard to target down to long tail analysis.
This would be useful because...

Implementation notes

Please provide details for implementation, such as:

• an example for how this would be used
• what this would look like
• how this would act
• any related work, including links to related issues

Acceptance criteria

How do we know when this work is done?

• Criterion

[piercema]

Thank you for submitting this suggestion. We are currently looking into the level of effort this parser would require and will proceed once we have additional information.