Extensions for Bro's Intelligence Framework.
Bro Python Shell
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Failed to load latest commit information.
scripts
testing
utils
LICENSE
README.md
bro-pkg.meta

README.md

Intel Extensions

This package provides extensions for Bro's intelligence framework. It implements the following functionalities:

  • Intelligence expiration on per item basis.
  • Remote deletion of intelligence items (requires broker).
  • Preservation of files associated with an intel hit.
  • Support for <IP>:<Port> indicators.

Note: Most of the scripts require Bro version 2.5.