bro_loaded_scripts.yml

name: Bro loaded_scripts
id: 81e08a21-a735-42b1-a08a-21a73582b1bf
version: 2
date: '2025-01-23'
author: Jacob Delgado, SnapAttack
description: Logs details about the scripts loaded by Zeek (formerly Bro) during initialization,
  including script names and paths.
mitre_components:
- Application Log Content
- Configuration Modification
- Script Execution
- OS API Execution
source: bro:loaded_scripts:json
sourcetype: bro:loaded_scripts:json
supported_TA:
- name: TA for Zeek
  url: https://splunkbase.splunk.com/app/5466
  version: 1.0.8