# Guest blog: The Intelligence Framework Update

**URL:** https://community.zeek.org/t/guest-blog-the-intelligence-framework-update/4532
**Category:** Zeek
**Created:** [December 5, 2016, 4:31pm UTC](https://community.zeek.org/t/guest-blog-the-intelligence-framework-update/4532 "2016-12-05T16:31:55Z")
**Posts on this page:** 2
**Page:** 1

<div class="post-metadata">

### Author: ![Dopheide\_Jeannette\_M](https://avatars.discourse-cdn.com/v4/letter/d/2bfe46/32.png) [@Dopheide\_Jeannette\_M](https://community.zeek.org/u/Dopheide_Jeannette_M)
#### Post date: [December 5, 2016, 4:31pm UTC](https://community.zeek.org/t/guest-blog-the-intelligence-framework-update/4532/1 "2016-12-05T16:31:55Z")

</div>

Guest blogger, Jan Grashöfer, has written a blog about updates to the Bro Intelligence Framework.

You can read the full post here, below is a summary:  
[http://blog.bro.org/2016/12/the-intelligence-framework-update.html](http://blog.bro.org/2016/12/the-intelligence-framework-update.html)

Summary

This blog post discusses the data model of Bro's intelligence framework and the new remove function. Furthermore the intelligence expiration and match extension mechanisms are explained. Finally the new type for subnets and the changes to the do\_notice.bro script are reviewed. I hope this post could shed some light on the ideas behind Bro's intelligence framework. Have fun integrating the framework into your Bro deployment!

Thanks Jan for your contribution!

---

<div class="post-metadata">

### Author: ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)
#### Post date: [May 6, 2022, 3:44pm UTC](https://community.zeek.org/t/guest-blog-the-intelligence-framework-update/4532/2 "2022-05-06T15:44:22Z")

</div>