Skip to content

Instantly share code, notes, and snippets.

@danzajork

danzajork/extract-files.bro

Created November 15, 2018 16:49
Show Gist options
  • Star 1 You must be signed in to star a gist
  • Fork 1 You must be signed in to fork a gist
  • Save danzajork/baf27a42538f5c41e3a37f1c47506781 to your computer and use it in GitHub Desktop.
Save danzajork/baf27a42538f5c41e3a37f1c47506781 to your computer and use it in GitHub Desktop.
Download ZIP
bro script to extract all files to disk
Raw
extract-files.bro
##! Extract all files to disk.
@load base/files/extract
event file_new(f: fa_file)
{
Files::add_analyzer(f, Files::ANALYZER_EXTRACT);
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment