Can bro scripts invoke other shells

Zeek
1

Hi,
Can a bro script run an external (linux ) command from an event handler ?

2

I think you’re looking for exec.

https://www.bro.org/sphinx/scripts/base/utils/exec.bro.html

3

Here's a sample script (for better or worse) that I wrote a while back
that looks up files in Virustotal.

https://github.com/sooshie/bro-scripts/blob/master/2.2-scripts/vt_check.bro

4

You can also check out the ActiveHTTP module to see how the Exec framework uses curl to make http connections from Bro.

-AK