:orphan:

Package: base/frameworks/signatures
===================================

The signature framework provides for doing low-level pattern matching.  While
signatures are not Zeek's preferred detection tool, they sometimes come in
handy and are closer to what many people are familiar with from using
other NIDS.

:doc:`/scripts/base/frameworks/signatures/__load__.zeek`


:doc:`/scripts/base/frameworks/signatures/main.zeek`

   Script level signature support.  See the
   :doc:`signature documentation </frameworks/signatures>` for more
   information about Zeek's signature engine.