Script examples

Explains various programming techniques with real examples.

Where to find more Trisul scripts

The following locations contain working Trisul LUA scripts

Trisul Apps : Working scripts ready to install in production environments as Trisul APPS
Trisul-Scripts - Samples in the trisul-scripts repository
BITMAUL examples - Protocol dissection LUA scripts

UA-Parser

Demonstrates how to scan Intel artifacts against hundreds of regexes using Google RE2

Trisul script to use UA-Parser regex to track HTTP User Agents

QUIC analyzer

A G-QUIC (Google QUIC) analyzer that parses a UDP-443 protocol, extracts indicators, and certificates. Learn how to use LuaJIT FFI to work with decompression, BITMAUL to parse protocols, etc.

Explains the Trisul Google QUIC protocol analyzer script