mirror of
https://github.com/zeek/zeek.git
synced 2025-10-02 14:48:21 +00:00
7a748526c0
Typically in base scripts, Log::create_stream() is called in zeek_init() handler with &priority=5 such that it will have already been created in the default zeek_init() &priority=0. |
||
|---|---|---|
| .. | ||
| __load__.zeek | ||
| main.zeek | ||
| README | ||
The signature framework provides for doing low-level pattern matching. While signatures are not Zeek's preferred detection tool, they sometimes come in handy and are closer to what many people are familiar with from using other NIDS.