When people think of an open source IDS, they usually think of Snort. Bro is another open source IDS that is more than just an IDS. It is a Network Security Monitor that does so much more. Matt Domko joins me this week to talk about Bropy, a tool he built that works with Bro to help perform anomaly detection. This is definitely a tool you will want to have in your bag of tricks. Some links of interest:

---

• Bro Homepage: https://www.bro.org/
• Bropy: https://github.com/hashtagcyber/bropy
• Matt's Twitter: @Hashtagcyber
• Matt's Bropy Talk at Security Onion Con: https://www.youtube.com/watch?v=LzFNOuaYc0g

---

Want to reach out to the show? There's a few ways to get in touch!

---

• Show Twitter: @PurpleSquadSec
• John's Twitter: @JohnsNotHere
• Website: purplesquadsec.com
• Slack Sign-Up Link: https://signup.purplesquadsec.com
• John's Peerlyst Profile: https://www.peerlyst.com/users/john-svazic

---

Thanks for listening, and I will talk with you again next time!

Find out more at http://purplesquadsec.com