20 lines
591 B
ReStructuredText
20 lines
591 B
ReStructuredText
:orphan:
|
|
|
|
Package: base/frameworks/signatures
|
|
===================================
|
|
|
|
The signature framework provides for doing low-level pattern matching. While
|
|
signatures are not Zeek's preferred detection tool, they sometimes come in
|
|
handy and are closer to what many people are familiar with from using
|
|
other NIDS.
|
|
|
|
:doc:`/scripts/base/frameworks/signatures/__load__.zeek`
|
|
|
|
|
|
:doc:`/scripts/base/frameworks/signatures/main.zeek`
|
|
|
|
Script level signature support. See the
|
|
:doc:`signature documentation </frameworks/signatures>` for more
|
|
information about Zeek's signature engine.
|
|
|