Re: Use cases of Bro for Threat hunting
Chris Walsh <[email protected]>
| Newsgroups | gmane.comp.security.detection.bro |
|---|---|
| Message-ID | <[email protected]> |
One useful source might be Liam Randall’s training materials, which you can find at https://github.com/LiamRandall An example of identifying and tracing the behavior of specific malware samples is https://github.com/LiamRandall/BroMalware-Exercise Additionally, some of the presentations at BroCon 2017 went into detail about identifying/analysing specific real-world threats: https://www.zeek.org/community/brocon2017.html Chris > On Jul 22, 2019, at 8:06 AM, Amber Graner <[email protected]> wrote: > > Hania, > > Here's a link to some uses case examples - https://docs.zeek.org/en/stable/examples/ > > I'm sure others on the list can point you to more specific uses cases. > _______________________________________________ Zeek mailing list [email protected] http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek