When people think of an open source IDS, they usually think of Snort. Bro is another open source IDS that is more than just an IDS. It is a Network Security Monitor that does so much more. Matt Domko joins me this week to talk about Bropy, a tool he built that works with Bro to help perform anomaly detection. This is definitely a tool you will want to have in your bag of tricks. Some links of interest:
Bro Homepage: https://www.bro.org/
Matt's Twitter: @Hashtagcyber
Matt's Bropy Talk at Security Onion Con: https://www.youtube.com/watch?v=LzFNOuaYc0g
Want to reach out to the show? There's a few ways to get in touch!
Show Twitter: @PurpleSquadSec
John's Twitter: @JohnsNotHere
Website: purplesquadsec.com
Slack Sign-Up Link: https://signup.purplesquadsec.com
John's Peerlyst Profile: https://www.peerlyst.com/users/john-svazic
Thanks for listening, and I will talk with you again next time!
Find out more at http://purplesquadsec.com

