Run scripts of Python in Bro scripting

Zeek
1

Hi everyone,

I wonder if there is a way of running a script in python at the precise moment that Bro launches some event such as Intel.log file is created?.

For example, if a malicious activity is launched to the network, o intel framework detects and create a Intel.log, then my script in python (script.py) read this intel.log file and execute a countermeasure blocking such malicious activity, I would like to know if there is any way to run this Python script within the Bro language to get this automatically.

Thank You,
Javier

2

Grep for the Exec framework. It should allow you to run a command at the shell from scriptland.

-AK