[Zeek] UPDATE: Bro/Zeek ATT&CK-based Analytics and Reporting (BZAR), by MITRE

[Fernandez, Mark I]

Gary, All -



We updated the BZAR scripts to be forward-compatible with Zeek v2.6.x and backward-compatible with v2.5.x and below, using '@if' directives to check the version number.  Affected files include: main.bro, bzar_dce-rpc.bro, and bzar_smb.bro.



Please visit the GitHub repo to find the updates files.

*       https://github.com/mitre-attack/car/tree/master/implementations/bzar



Cheers,

Mark



Mark I. Fernandez

The MITRE Corporation

mfernandez at mitre.org<mailto:mfernandez at mitre.org>



P.S.  The Bro/Zeek Package Manager for BZAR is coming soon.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/zeek/attachments/20190410/867578f3/attachment.html