Trisul Network Analytics
Developer Zone

**This is an old revision of the document!** ----

====== Script examples ====== Explains various programming techniques with real examples. ===== Where to find more Trisul scripts ===== The following locations contain working Trisul LUA scripts - [[https://github.com/trisulnsm/apps/tree/master/analyzers|Trisul Apps]] : Working scripts ready to install in production environments as Trisul APPS - [[https://github.com/trisulnsm/trisul-scripts|Trisul-Scripts]] - Samples in the trisul-scripts repository - [[https://github.com/trisulnsm/bitmaul/tree/master/examples|BITMAUL examples]] - Protocol dissection LUA scripts ===== UA-Parser ===== Demonstrates how to scan Intel artifacts against hundreds of regexes using Google RE2 [[lua:ua-parser|Trisul script to use UA-Parser regex to track HTTP User Agents]] ===== QUIC analyzer ===== A G-QUIC (Google QUIC) analyzer that parses a UDP-443 protocol, extracts indicators, and certificates. Learn how to use LuaJIT FFI to work with decompression, BITMAUL to parse protocols, etc. [[lua:quic|Explains the Trisul Google QUIC protocol analyzer script]]