[Bro] Learning the Bro Scripting Language Part 3 - Detecting basic auth and going from evidence to practical use in Bro
mcholste at gmail.com
Fri May 4 09:34:48 PDT 2012
Great post! Perfect cheat-sheet for incident responders that need to
add something specific.
On Fri, May 4, 2012 at 10:24 AM, scott runnels <srunnels at gmail.com> wrote:
> I sent the first post of the series to the mailing list and got a decent
> response from people who were interested in learning Bro's scripting
> This post tries to move to a more operationally useful script and something
> you could actually deploy across an enterprise. If anyone has any comments
> or critiques I'd love to hear them.
> Scott Runnels
> Bro mailing list
> bro at bro-ids.org
More information about the Bro