[Bro] Bro and filesystem data on a host (UNCLASSIFIED)

[Fair, Charles A SSG USARMY NG NGB ARNG PEC (US)]

Classification: UNCLASSIFIED
Caveats: NONE

Seth,

We spoke at the 2012 Bro Exchange about how Bro can be used on a filesystem of a host or such, brain a bit fuzzy this early in the morning at 10:36 :)  Could you expand on the topic a bit/point me in the right direction?

Thanks,

SSG Charles "Chuck" A. Fair (not a CISSP, but passed the test)
Information Systems/Information Assurance NCO
Information Technology Training Center, PEC, Camp Robinson AR



Classification: UNCLASSIFIED
Caveats: NONE