Note: Our current website is at www.zeek.org. This website is unmaintained and contains outdated information.
Abstract
The Bro integration in TimeMachine lets you automatically trigger historical packet dumps for compromised machines. This enables you to not only see exactly what a compromised machine is doing, but how it was initially compromised.
© 2014 The Bro Project.