5 lines
278 B
Plaintext
5 lines
278 B
Plaintext
The notice framework enables Zeek to "notice" things which are odd or
|
|
potentially bad, leaving it to the local configuration to define which
|
|
of them are actionable. This decoupling of detection and reporting allows
|
|
Zeek to be customized to the different needs that sites have.
|