[Bro] using YARA signatures within Bro
ambros.novak.89 at gmail.com
Mon Feb 5 14:03:42 PST 2018
I'm currently using YARA rules (yararules.yar) to inspect files from bro
Besides using bro to inspect files with YARA, how can I get bro to use YARA
rules to inspect traffic and also certificates?
Thank you for your help. I'm still learning bro and YARA.
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Bro