This repository has been archived by the owner on Apr 16, 2021. It is now read-only.

securityonion-elsa-extras: add parser for Bro 2.4 pe.log #758

Closed

dougburks opened this issue Jun 19, 2015 · 4 comments

Contributor

dougburks commented Jun 19, 2015

https://www.bro.org/download/NEWS.bro.html

"Bro now has a file analyzer for Portable Executables. Activity gets logged into pe.log."

Contributor Author

dougburks commented Aug 21, 2015

commit:
Security-Onion-Solutions/securityonion-elsa-extras@139ae2a

Contributor Author

dougburks commented Aug 21, 2015

To create pe.log for testing:
sudo tcpreplay -ieth1 -M10 /opt/samples/.pcap /opt/samples/markofu/.pcap

Contributor Author

dougburks commented Aug 22, 2015

submitted for testing:
https://groups.google.com/d/topic/security-onion-testing/fPWJbPBkIww/discussion

Contributor Author

dougburks commented Sep 12, 2015

Published:
http://blog.securityonion.net/2015/09/new-securityonion-elsa-extras-and.html

dougburks closed this as completed

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.