Zeek
Another cool thing about Bro: SMB analysis!
Bro’s SMB protocol analyzer has undergone several iterations, and it is now a built-in feature that many Bro users might have overlooked.
Featured
Recognizing and detecting data exfiltration
See how to detect data exfiltration hiding in trusted protocols like DNS, SMB, and HTTP/S, and how Corelight catches it before it becomes a breach.