5 lines
235 B
Plaintext
5 lines
235 B
Plaintext
The signature framework provides for doing low-level pattern matching. While
|
|
signatures are not Zeek's preferred detection tool, they sometimes come in
|
|
handy and are closer to what many people are familiar with from using
|
|
other NIDS.
|