Re: Updating Zeek 2.5.3
Eric Urban <[email protected]>
| Newsgroups | gmane.comp.security.detection.bro |
|---|---|
| Message-ID | <CAE-rCTZtV4GK4sgqZhaN9J9gmfCXiJ+XBWA5yX6VqxG_AZhRmw@mail.gmail.com> |
Do you mean the Team Cymru malware hashes? If so, I believe the database is not stored on disk but instead those are network (DNS TXT record) lookups. The Zeek scripting examples actually walks through that one at https://docs.zeek.org/en/stable/examples/scripting/. -- Eric Urban University Information Security | Office of Information Technology | it.umn.edu University of Minnesota | umn.edu [email protected] On Thu, Jun 20, 2019 at 11:48 AM Fyf Fitty <[email protected]> wrote: > Hello there, > > I was wondering if theres a way to update the signature database in Zeek > 2.5.3 without updating to a newer version of Zeek. > > V/R > Charles S. Garbag > _______________________________________________ > Zeek mailing list > [email protected] > http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek _______________________________________________ Zeek mailing list [email protected] http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek