[Snort-openappid] Snort Rule

Shane Corridon shane.corridon at mycit.ie
Sat Mar 31 06:30:58 EDT 2018

 Thanks for your help. In that case would you know a rule to use snort to
sniff network traffic before and after an application is installed and show
an alert if anything major has changed ?

On 29 March 2018 at 13:33, Shane Corridon <shane.corridon at mycit.ie> wrote:

> Hi All,
> I am looking for a rule to scan the computer after a new program has been
> installed and return any alarming results or return an "Everything is
> normal" result.
> Is there anything out there like this already?
> Thanks for your help
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-openappid/attachments/20180331/e11b1380/attachment.html>

More information about the Snort-openappid mailing list