[Snort-sigs] FP on 138-3

Joel Esler jesler at ...435...
Fri May 11 16:46:11 EDT 2012


Well, that's pretty difficult as that technically matches the SSN pattern.

Not sure if there's much we can do there.

Do you use the SDPreprocessor with regularity?

On Fri, May 11, 2012 at 3:58 PM, Weir, Jason <jason.weir at ...3410...> wrote:

> Triggered on this “/7036-687-10-9544.js” – any chance of tightening the sig up a bit??****
>
> ** **
>
> Thanks****
>
> Jason****
>
> ** **
>
> _____________________________________________________________________________________________
>
> Please visit www.nhrs.org to subscribe to NHRS email announcements and updates.
>
>
>
> ------------------------------------------------------------------------------
> Live Security Virtual Conference
> Exclusive live event will cover all the ways today's security and
> threat landscape has changed and how IT managers can respond. Discussions
> will include endpoint security, mobile security and the latest in malware
> threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
> _______________________________________________
> Snort-sigs mailing list
> Snort-sigs at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/snort-sigs
> http://www.snort.org
>
>
> Please visit http://blog.snort.org for the latest news about Snort!
>



-- 
Joel Esler
Senior Research Engineer, VRT
OpenSource Community Manager
Sourcefire
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-sigs/attachments/20120511/38fe9ff8/attachment.html>


More information about the Snort-sigs mailing list