zeek/scripts/base/frameworks/notice
2024-11-14 12:59:22 +01:00
..
actions Revert "Merge remote-tracking branch 'origin/topic/vern/at-if-analyze'" 2023-05-31 09:20:33 +02:00
__load__.zeek GH-379: move catch-and-release and unified2 scripts to policy/ 2019-06-05 13:33:45 -07:00
main.zeek frameworks/notice: Remove Broker::auto_publish() 2024-11-14 12:59:22 +01:00
README More bro-to-zeek renaming in scripts and other files 2019-05-16 02:36:41 -05:00
weird.zeek http: Prevent request/response de-synchronization and unbounded state growth 2023-08-28 15:02:58 +02:00

The notice framework enables Zeek to "notice" things which are odd or
potentially bad, leaving it to the local configuration to define which
of them are actionable.  This decoupling of detection and reporting allows
Zeek to be customized to the different needs that sites have.