The following TQL queries are Bro software queries.
Identify IIS servers and versions
class:bro_software application:"microsoft-iis" | groupby content
Identify Tomcat servers and versions
class:bro_software application:"java" | groupby content
Identify Apache servers and versions
class:bro_software application:"apache" | groupby content
Identify PHP-enabled servers and versions
class:bro_software application:"php" | groupby content