[Bro] Learning the Bro Scripting Language Part 3 - Detecting basic auth and going from evidence to practical use in Bro

Martin Holste mcholste at gmail.com
Fri May 4 09:34:48 PDT 2012


Great post!  Perfect cheat-sheet for incident responders that need to
add something specific.

On Fri, May 4, 2012 at 10:24 AM, scott runnels <srunnels at gmail.com> wrote:
> I sent the first post of the series to the mailing list and got a decent
> response from people who were interested in learning Bro's scripting
> language.
>
> This post tries to move to a more operationally useful script and something
> you could actually deploy across an enterprise.  If anyone has any comments
> or critiques I'd love to hear them.
>
> http://ryesecurity.blogspot.com/2012/05/learning-bro-scripting-language.html
>
>
> v/r
> Scott Runnels
>
>
>
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro




More information about the Bro mailing list