To analyze malware, the SEI's CERT researchers have developed a suite of tools based on a framework called Pharos, which is built on top of Lawrence Livermore National Laboratory's ROSE compiler ...

The Unexpected Outbound Protocols processor ingests SiLK binary files to help capture and analyze network flow data.