[Snort-sigs] Proposed Signature for Keystrokes iKeyMonitor iOS Keylogger

Matt Jonkman jonkman at ...3525...
Wed Mar 21 15:39:46 EDT 2012


Fixing, we didn't post on the ET side, was waiting on an answer on the question privately. :)

Thanks Nathan!

Matt


On Mar 21, 2012, at 3:22 PM, Community Signatures wrote:

> On 03/21/12 14:18, Bad Horse wrote:
>> Hello.  Wouldn't this be "from_server" and not "to_server" along with
>> "$HOME_NET any -> any any" ?
>> 
>> I could be not understanding this though but if the page is being served
>> I think it should be "from_server".
> 
> 100% correct Bad Horse, thank you, and apologies to all for this
> mistake.  I appreciate the peer review and this mistake was made on the
> ET side as well, would you mind correcting it there too?
> 
> Thanks,
> Nathan
> 
> ------------------------------------------------------------------------------
> This SF email is sponsosred by:
> Try Windows Azure free for 90 days Click Here 
> http://p.sf.net/sfu/sfd2d-msazure
> _______________________________________________
> Snort-sigs mailing list
> Snort-sigs at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/snort-sigs
> http://www.snort.org
> 
> 
> Please visit http://blog.snort.org for the latest news about Snort!


----------------------------------------------------
Matt Jonkman
Emerging Threats Pro
Open Information Security Foundation (OISF)
Phone 866-504-2523 x110
http://www.emergingthreatspro.com
http://www.openinfosecfoundation.org
----------------------------------------------------





More information about the Snort-sigs mailing list