Aashish Sharma
Results
12
comments of
Aashish Sharma
Sorry, I didn't see this message until today. host-profiling.bro works by identifying services on local_nets by tapping into connection_established even where a remote IP has a full SF to a...
Here is what can probably replicate for you : ``` @load local.zeek @load policy/frameworks/notice/actions/drop.zeek redef Log::print_to_log = Log::REDIRECT_STDOUT; @load dns_monitoring @load misp_intel/scripts redef Broker::default_clone_mutation_buffer_interval = 10sec; redef Broker::default_clone_stale_interval = 30sec;...