[Bro] Detecting Encryption
bmixonb1 at cs.unm.edu
Mon Aug 24 07:27:56 PDT 2015
-----BEGIN PGP SIGNED MESSAGE-----
Seth, was the link provided not a file entropy analyzer?
On 08/24/2015 07:59 AM, Seth Hall wrote:
>> On Aug 21, 2015, at 3:50 PM, Robin Sommer <robin at icir.org>
>> Bro has functions to measure entropy, see
> Unfortunately we still haven’t added file and connection entropy
> analyzers yet. I have a file entropy analyzer floating around
> somewhere, but generally both of those are extremely easy to write.
> I think that Ben would need those to do what he’s trying to do.
> -- Seth Hall International Computer Science Institute (Bro) because
> everyone has a network http://www.bro.org/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
-----END PGP SIGNATURE-----
More information about the Bro