I am looking at those Bro log files but I can’t find anything that would stand out… I am obviously not suppose to go through all the 13000 lines manually. HTB is killing me 
Any hints? I know pretty well how to search stuff in wireshark but I’m kind of lost. Hard to search if no ideas what to look for. Any hints?