Ransomware detection with Bro by Mike Stokkel
Channel: Zeek
Date: 2016-11-23

This talk will present the results from my internship at Fox-IT, which involves creating a Bro policy for detecting ransomware on SMB file share servers using Bro. The goal of the policy is to detect both new and old ransomware encrypting a file share server.

Speaker Bio: Mike Stokkel is a Security analyst at the Security Operation Center of Fox-it.

Slides: https://www.bro.org/brocon2016/slides/stokkel_ransomware.pdf