Hi,
is it possible in BRO to execute commands automatically hent an alert is detected?
Thanks
T.
Bro has the ability to execute system commands when something occurs. This something dies not have to be an alert. It can be pretty much any event occurring on the network Bro is monitoring.
For clarification, Bro does not have alerts the same way a traditional IDS might. Instead, Bro has something similar called notifications.
-AK