UPDATE: Bro/Zeek ATT&CK-based Analytics and Reporting (BZAR), by MITRE
"Fernandez, Mark I" <[email protected]>
| Newsgroups | gmane.comp.security.detection.bro |
|---|---|
| Message-ID | <DM2PR09MB07789FB12F5B9A7B402B5A53CF2E0@DM2PR09MB0778.namprd09.prod.outlook.com> |
Gary, All - We updated the BZAR scripts to be forward-compatible with Zeek v2.6.x and backward-compatible with v2.5.x and below, using '@if' directives to check the version number. Affected files include: main.bro, bzar_dce-rpc.bro, and bzar_smb.bro. Please visit the GitHub repo to find the updates files. * https://github.com/mitre-attack/car/tree/master/implementations/bzar Cheers, Mark Mark I. Fernandez The MITRE Corporation [email protected]<mailto:[email protected]> P.S. The Bro/Zeek Package Manager for BZAR is coming soon. _______________________________________________ Zeek mailing list [email protected] http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek