All workshop materials are available to download for offline use and are based on Bro version 2.0 beta. For exercises that involve Bro scripting, you may find the script reference and the Bro language cheat sheet helpful.
8:00am Breakfast & Registration
9:30am Exercise 1: Getting Started
10:45am We have new scripts! (Video)
4:15pm Leveraging Bro for Incident Response (Martin Holste) (Abstract)
2:00pm Bro @ LBL: Operational Insights (Aashish Sharma & Jim Mellander) (Abstract)
4:10pm Analyzing and Visualizing Bro Logs with Splunk (Justin Azoff) (Abstract)
4:35pm Using Bro and TimeMachine for Incident Response (Justin Azoff) (Abstract)