[Bro] Detecting Encryption

nhtvl bmixonb1 at cs.unm.edu
Mon Aug 24 07:51:15 PDT 2015


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

OK thanks. So I would write my own broscripts to do connection and
file entropy analysis then right?

On 08/24/2015 08:50 AM, Seth Hall wrote:
> 
>> On Aug 24, 2015, at 10:27 AM, nhtvl <bmixonb1 at cs.unm.edu> wrote:
>> 
>> Seth, was the link provided not a file entropy analyzer?
> 
> No, those are built-in-functions (BiFs) to calculate entropy on
> strings that are available in Bro’s scripting language.
> 
> .Seth
> 
> -- Seth Hall International Computer Science Institute (Bro) because
> everyone has a network http://www.bro.org/
> 
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEcBAEBAgAGBQJV2y9jAAoJEO09Oz0uXqnKvzUIAKrP0Ow3F1BLjuZUyxBsubf2
MGLz0PcHoRtOK0RFZhYW57n5tvX9IbVQyGcRq63bXejiIRwKB0giZWb95kNZY8HP
sU9nhRfhnEiS+3ahXHYOLmbQLW9k0oh8aAMIy5ocoxjm8p5y1Zl+560bQjv4k4T3
CzIzz9VjrWJyqjNW+tI+m9XBoMKzjVMHjHJf1H2UMVBo+mAFlcP3SHpg2YsNfpaD
9agWx53DY29UIWyhuEVblVjv6UMYa/fGO0TCArYGlzvi9YdcLyYnCAFuCQJARDum
6jwd/2coOqPO2oxlOxJkeXNw+Jszq8xuSae0KwKMmNoe4tu1q0q6CH4jpKZXXZU=
=TXfm
-----END PGP SIGNATURE-----


More information about the Bro mailing list