[Snort-sigs] FP: WEB-CLIENT Microsoft SYmbolic LinK file download request

Nerijus Krukauskas nkrukauskas at ...2420...
Fri Jun 27 02:11:15 EDT 2008


Rule: WEB-CLIENT Microsoft SYmbolic LinK file download request [sid 13583].

FP: generates alerts when the search content string "slk" is matched
with part of web server address. E.g. ww.slkferries.ee.

-- 
http://nk99.org/




More information about the Snort-sigs mailing list