$ 0 0 One of the many ways to look for Exploit Kit/drive-by behaviormore here.........https://github.com/sooshie/bro-scripts/tree/master/exploitkit