[Bro] Crowdstrike Additional Intel types
Seth Hall
seth at icir.org
Tue Jan 13 10:16:38 PST 2015
> On Jan 13, 2015, at 12:49 PM, Josh Liburdi <liburdi.joshua at gmail.com> wrote:
>
> Seth nailed it-- the Intel::USER_NAME fit a specific use case for me
> (FTP authentication), so that's why I added it instead of waiting for
> the Authentication framework.
And thanks for that. I definitely think it makes sense to bash your way through any problems you’re running into rather than wait for a Bro release where we (at least attempt) to elegantly solve the problem. :)
.Seth
--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro.org/
More information about the Bro
mailing list