[Bro] loading modules and automatically using custom scripts (clautos)

김희철 hckim at narusec.com
Wed Sep 7 18:00:27 PDT 2016


1) how to load custom scripts in the core of Bro ?

custom script are saved in   ~prefix-DIR/share/bro/site
if you upgrading a bro, it won't be deleted

https://www.bro.org/sphinx/quickstart/#deployment-customization

2) is the extract files script different because it's not in the "policy"
folder ?

for file extraction I used
https://github.com/hosom/bro-file-extraction



-- 
------------------------------------------------------
Hichul Kim 김희철 선임 연구원

Naru Security  (주)나루씨큐리티
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20160908/080313af/attachment.html 


More information about the Bro mailing list