[Bro] Bro handling of Microsoft BITS traffic
josh.guild at morphick.com
Mon Feb 29 09:44:14 PST 2016
I have a question about how Bro handles Micorsoft BITS (Background
Intelligent Transfer Service) traffic since the file is only partially
downloaded in the session it's monitoring. We've seen some traffic and it
looks like Bro just shows as an incomplete file and doesn't carve it
Is there anything we can do to mitigate this?
Network Intelligence Analyst
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Bro