Looking for Ghosts in the Machine by Scott Campbell
Channel: Zeek
Date: 2015-09-04

This work will describe the current efforts at NERSC to analyze system and application layer activity (syslogs, instrumented ssh and auditd) using the powerful input framework, clustering and scripting capabilities found in the core bro application.

Scott Campbell is a research and production security professional National Energy Research Scientific Computing Center (NERSC).