@cR0w@infosec.exchange @FritzAdalis@infosec.exchange Zeek & Corelight shops would have access to it. But that’s more D&R where WAF implements them as protect policies (Akamai, Shape/F5, Cloudflare, AWS, etc)