I am looking at the UEBA Hunting guide and it talks about Bro logs as a data source. Is some way to get Bro logs into RSA? How would this work?
can you provide the source doc that mentions this?
UEBA Essential Hunting Guide: https://community.rsa.com/docs/DOC-86470. The table in the Intrusion Behaviors section under the Required Data Sources column.
Retrieving data ...