Ok, so if you have a highly active network pushing many gigs of traffic, then it seems like hash based iocs are not likely to be reliable…
However, ssdeep hashing by bro would likely not be as severely impacted, correct?
Related topics
| Topic | Replies | Views | Activity | |
|---|---|---|---|---|
| IOCs data for hashes. | 7 | 87 | May 6, 2022 | |
| Bro Digest, Vol 126, Issue 43 | 1 | 60 | May 6, 2022 | |
| Flow blocking with iptables from Bro | 5 | 225 | May 6, 2022 | |
| Bro: a question regarding type | 1 | 75 | May 6, 2022 | |
| Devastating DoS attack on Bro via Algorithmic Complexity Attacks | 1 | 62 | May 6, 2022 |