Bro Log Analysis

Security Feeds

• VirusTotal
• OpenTAXII
• A curated list of Awesome Threat Intelligence resources
• DNS-BH – Malware Domain Blocklist by RiskAnalytics
• CyberCrime Tracker
• Malwarebytes(hpHosts EMD)
• Security-Onion-Solutions/security-onion DNS anomaly detection script

Tools/Parsers

• Bro Analysis Tools (BAT)
• BroThon this one is similar to BAT
• Simple logfile parser for Bro IDS
• Working with Bro Logs: Queries By Example
• Integrating Bro IDS with the ELK Stack