In this talk Aashish Sharma and Vincent Stoffer demonstrate incident detection and analysis with Bro. They will review several incidents over the last year and show how they use Bro to prevent reconnaissance, detect miscreant activity, and perform detailed network forensics. They will also review some of the scripts and capabilities of Bro they have implemented as a results of recent incidents.