[Bro] BRO - Ransomware script (fox-it)

Izik Birka Izik.Birka at hot.net.il
Thu Jun 1 03:10:04 PDT 2017

How can I check that the script is working ?
Any idea where I can find PCAP with malicious SMB activity ?


This message (including any attachments) is intended only for the use of the individual or entity to which it is addressed and may contain materials protected by copyright or information that is non-public, proprietary, privileged, confidential, and exempt from disclosure under applicable law or agreement.

If you are not the intended recipient, you are hereby notified that any use, dissemination, distribution, or copying of this communication is strictly prohibited. If you have received this communication by error, notify the sender immediately and delete this message immediately.

Thank you.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20170601/2846e305/attachment.html 

More information about the Bro mailing list