Главная
Study mode:
on
1
Introduction
2
Capturing Packets
3
Platform Layer
4
Bro Command Lines
5
Conrad Lock
6
HTTP Dialogue
7
Protocol Analyzer
8
SMTP
9
Product by Bro
10
Simple heuristics
11
SSH logins
12
Host name login
13
Intelligence
14
Wallet
15
Passive Intelligence Integration
16
Active Intelligence Integration
17
Improv Script Code
18
Task Script Code
19
Alerts
20
Summary
Description:
Explore the flexible open-source platform Bro in this 25-minute conference talk from TROOPERS14. Dive into packet capturing, platform layers, and Bro command lines. Learn about Conrad Lock, HTTP dialogue analysis, and SMTP protocol analyzers. Discover Bro's product features, including simple heuristics for SSH logins and host name login intelligence. Examine passive and active intelligence integration, and understand how to implement improv and task scripts. Gain insights into alert systems and walk away with a comprehensive understanding of Bro's capabilities for network security and analysis.

Bro - A Flexible Open-Source Platform

WEareTROOPERS
Add to list
0:00 / 0:00