[Snort-sigs] Hotbar

Rowland, Krisa W ERDC-ITL-MS Contractor Krisa.W.Rowland at ...2112...
Thu Mar 18 13:00:03 EST 2004

Does anyone have a better alert for Hotbar than this?  I mean - this just
keys on Hotbar - so if you just google for Hotbar you set off 30 alerts!  
alert ip any any -> any any (msg:"Malware hotbar";content:"hotbar";nocase;)

Krisa Rowland 
ERDC Information Assurance Team 
(SAIC Contractor) 
3909 Halls Ferry Rd.,  Bldg. 8000 
Vicksburg, MS 39180 
krisa.w.rowland at ...2112... 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-sigs/attachments/20040318/7b9c55c2/attachment.html>

More information about the Snort-sigs mailing list