Latest news, tutorials, and insights from the Zeek community.
Earlier this week, Mandiant released their APT1 report which I’m not going to bother providing any analysis or commentary on, there has been plenty of that this week. As a developer on a network analysis tool…
read more about Watching for the APT1 IntelligenceThe Bro Project has an opening for a three month summer internship. If you are interested in helping us improve Bro and develop new functionality, please apply! See here for more information.
read more about Bro Summer Internship AvailableTurktrust, a Certificate Authority (CA) that is trusted by all major browsers and systems accidentally issued intermediate CA certificates instead of end-host certificates to two of its clients. Both of these intermediates were valid and signed…
read more about Searching the ICSI Notary for Rogue Turktrust Intermediate CertificatesAs we mentioned in our preceding blog posting, ICSI has been harvesting details about SSL connections and their contained certificates since the beginning of this year.We use the data to provide a notary service to the…
read more about The Tree of TrustToday, we are happy to publicly announce the ICSI Certificate Notary. This service provides near real-time reputation information on a large number of TLS/SSL certificates seen in the wild, collected continuously by Bro at several partner…
read more about Using the ICSI Certificate NotaryWe are very excited to release Bro 2.1 today. See the download page for the source code; binary packages will come soon. Bro 2.1 comes with extensive support for IPv6, tunnel decapsulation, a new input framework…
read more about Bro 2.1 ReleaseJust in time for the upcoming Bro Exchange, we are happy to announce a public beta of Bro 2.1. Head over to the download page to get the source. Bro 2.1 comes with extensive support for IPv6,…
read more about Bro 2.1 Public BetaThe Bro Exchange 2012 registration form has just been activated. This event is being organized rather quickly at this point, so please everyone register quickly and send in your presentation proposals to us at info@bro-ids.org. Bro…
read more about Bro Exchange 2012 Registration Form PostedWe have now finalized the dates for our upcoming Bro users meeting: the Bro Exchange 2012 will take place on August 7-8, 2012, at the National Center for Atmospheric Research (NCAR) in Boulder, Colorado. See this…
read more about Bro Exchange 2012: Dates finalizedBro now features a flexible input framework that allows users to import data into Bro. Data is either read into Bro tables or converted to events which can then be handled by scripts. The input framework…
read more about Upcoming: Loading Data into Bro with the Input Framework