NIDS Threat Hunting with Bro IDS jbower, February 20, 2017April 21, 2023 This post is a quick look at how I personally use Bro IDS for threat hunting. Specifically some of the queries I run when I start a hunt by data set. A quick note on Bro. Bro IDS is a pretty amazing piece of software for threat hunting and my… Continue Reading
NIDS How to Install Bro IDS 2.5 on Ubuntu 16.0x jbower, September 5, 2016April 21, 2023 I decided to write out the steps I took to for installing Bro IDS 2.5 on Ubuntu 16.0x. Before we begin installing Bro from source we need to make sure we have all the correct dependencies. On Ubuntu 16.0x you can run the following: sudo apt-get install cmake make gcc… Continue Reading
NIDS How to Visualize Network PCAP Files in Kali Linux jbower, September 15, 2014April 21, 2023 So this past weekend I attended the Security Onion Conference in Augusta, GA. While sitting in the back listening to some great speakers, @pentestfail and I were hacking away on a side project of his that involved analyzing a decent number of PCAP files. As usual I was doing my… Continue Reading