User Tools
lua:examples
Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
|
lua:examples [2018/12/22 12:46] veera |
lua:examples [2018/12/22 12:59] (current) veera [QUIC analyzer] |
||
|---|---|---|---|
| Line 14: | Line 14: | ||
| ===== UA-Parser ===== | ===== UA-Parser ===== | ||
| + | Demonstrates how to scan Intel artifacts against hundreds of regexes using Google RE2 | ||
| [[lua:ua-parser|Trisul script to use UA-Parser regex to track HTTP User Agents]] | [[lua:ua-parser|Trisul script to use UA-Parser regex to track HTTP User Agents]] | ||
| Line 23: | Line 24: | ||
| [[lua:quic|Explains the Trisul Google QUIC protocol analyzer script]] | [[lua:quic|Explains the Trisul Google QUIC protocol analyzer script]] | ||
| + | |||
| + | ===== Strelka ===== | ||
| + | |||
| + | Strelka is a file scanning framework. This little script integrates Trisul File Extraction with Strelka scanning. The scan results in the form of JSON is fed back into Trisul as resources for search, alerting, or analysis. | ||
| + | |||
| + | [[lua:strelka|Send files extracted from network to a Strelka cluster and feed back results]] | ||
lua/examples.1545482792.txt.gz · Last modified: 2018/12/22 12:46 by veera
Page Tools
Except where otherwise noted, content on this wiki is licensed under the following license: CC Attribution-Share Alike 4.0 International
