[Snort-openappid] new to snort / mailing list

Jon James jon.james.atx at gmail.com
Wed Oct 3 19:37:51 EDT 2018


Hi folks,

I'm new to snort and openappid.  Was curious if there was an openappid
signature for powershell? I've looked in various areas within snort /
openappid categories but not finding it.

Does this exist? I want to block powershell from leaving my network.

JJ
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-openappid/attachments/20181003/f6163fcb/attachment.html>


More information about the Snort-openappid mailing list