[Bro] Options for detecting Windows XP

scott mcallester scott at 0x4c.com
Wed Mar 5 14:41:09 PST 2014


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

You could also grep for "Windows NT 5.1" in software.log or http.log

Scott
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=J6aP
-----END PGP SIGNATURE-----




More information about the Bro mailing list