Add policy script for Windows version detection via CryptoAPI HTTP Traffic

Description

Windows systems access a Microsoft Certificate Revocation List (CRL) periodically. The user agent for these requests reveals which version of Crypt32.dll installed on the system, which can uniquely identify the version of Windows that's running.

This branch adds a Software framework policy script will log the version of Windows that was identified.

Environment

None

Assignee

Seth Hall

Reporter

Vlad Grigorescu

Labels

None

External issue ID

None

Components

Affects versions

Priority

Normal
Configure