[Snort-sigs] FP: WEB-CLIENT Microsoft SYmbolic LinK file download request

Ureleet ureleet at ...2420...
Sun Jun 29 14:31:25 EDT 2008


this sig sucked.

On Fri, Jun 27, 2008 at 2:11 AM, Nerijus Krukauskas
<nkrukauskas at ...2420...> wrote:
> Rule: WEB-CLIENT Microsoft SYmbolic LinK file download request [sid 13583].
>
> FP: generates alerts when the search content string "slk" is matched
> with part of web server address. E.g. ww.slkferries.ee.
>
> --
> http://nk99.org/
>
> -------------------------------------------------------------------------
> Check out the new SourceForge.net Marketplace.
> It's the best place to buy or sell services for
> just about anything Open Source.
> http://sourceforge.net/services/buy/index.php
> _______________________________________________
> Snort-sigs mailing list
> Snort-sigs at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/snort-sigs
>




More information about the Snort-sigs mailing list