[Bro] Insider Abuse Use Case

[Wulfy H]

Hello all,

On slide 11 of this presentation:
https://www.bro.org/bro-workshop-2011/slides/network-forensics.pdf

There is a Use Case for Insider Abuse, I am interested in this and am a
beginner to Bro IDS scripting. Is there any existing script dealing with
some form of Insider Abuse that I can use as an example?

Thanks,

W.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20160718/6b26a19a/attachment.html