zeek-osquery: Host-Network Correlation for Advanced Monitoring and Intrusion Detection

Steffen Haas, Robin Sommer, Mathias Fischer

Intrusion Detection Systems (IDSs) can analyze network traffic for signs of attacks and intrusions. However, encrypted communication limits their visibility and sophisticated attac…