[Bro] Yara integration with Bro 2.5

erik clark philosnef at gmail.com
Wed Apr 5 06:02:51 PDT 2017


Er, doesnt this come with  massive overhead? Also, file inspection rules
are non-trivial. Given the number of files that bro processes, it seems
that on anything other than a very tiny link this would cause giant
problems...
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20170405/e2160eaa/attachment.html 


More information about the Bro mailing list