Has anyone tested a WannaCrypt trace file against Bro's SMB analyzer and file extraction yet? I'm curious to hear the results. -AK -------------- next part -------------- An HTML attachment was scrubbed... URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20170515/eb582767/attachment.html