Re: Request for Feedback - Zeek Process Supervision Model
anthony kasza <[email protected]>
| Newsgroups | gmane.comp.security.detection.bro |
|---|---|
| Message-ID | <CAEZw2byhXdOTvBKdo6c8bOFC5iRQTuXWPvH9n3J3kbHos9MKWA@mail.gmail.com> |
I'm excited to see this. I think it's a great design choice. This sentence is my favorite, "We need to make it easy to test, from the command-line, using just PCAP files, a complete cluster deployment (scaled down) as it would work in production." I'm looking forward to it! -AK On Mon, Mar 18, 2019, 19:44 Jon Siwek <[email protected]> wrote: > I just published some design thoughts related to a major new Zeek > feature that's planned/upcoming: a process supervision model that may > act as an alternative (successor) to BroControl. Find that here: > > https://blog.zeek.org/2019/03/beyond-brocontrol-new-process.html > > Feel free to use this mailing list / thread to provide feedback, thanks. > > - Jon > _______________________________________________ > Zeek mailing list > [email protected] > http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek > _______________________________________________ Zeek mailing list [email protected] http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek