[Bro] Crowdstrike Additional Intel types

Seth Hall seth at icir.org
Tue Jan 13 10:16:38 PST 2015


> On Jan 13, 2015, at 12:49 PM, Josh Liburdi <liburdi.joshua at gmail.com> wrote:
> 
> Seth nailed it-- the Intel::USER_NAME fit a specific use case for me
> (FTP authentication), so that's why I added it instead of waiting for
> the Authentication framework.

And thanks for that.  I definitely think it makes sense to bash your way through any problems you’re running into rather than wait for a Bro release where we (at least attempt) to elegantly solve the problem. :)

  .Seth

--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro.org/




More information about the Bro mailing list