[Snort-sigs] Info on 26266-26271?

Nick Randolph drandolph at ...435...
Fri Apr 19 10:32:02 EDT 2013


They look for domains that have been generated using the domain generation
algorithm implemented in Zeus.


On Fri, Apr 19, 2013 at 10:23 AM, Klein, Michael
<Michael.Klein at ...3793...>wrote:

>  All, looking for a bit of information regarding signatures 26266 – 26271.
> ****
>
> ** **
>
> Wondering if there’s some documentation, or maybe a breakdown of what
> exactly this is looking for, as the rules are fairly beefy!****
>
> ** **
>
> Mike****
>
>
> ------------------------------------------------------------------------------
> Precog is a next-generation analytics platform capable of advanced
> analytics on semi-structured data. The platform includes APIs for building
> apps and a phenomenal toolset for data science. Developers can use
> our toolset for easy data analysis & visualization. Get a free account!
> http://www2.precog.com/precogplatform/slashdotnewsletter
> _______________________________________________
> Snort-sigs mailing list
> Snort-sigs at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/snort-sigs
> http://www.snort.org
>
>
> Please visit http://blog.snort.org for the latest news about Snort!
>



-- 

Nick Randolph
Research Engineer
Sourcefire, Inc.
nrandolph at ...435...
Sourcefire.com <http://www.sourcefire.com/>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-sigs/attachments/20130419/ac164a33/attachment.html>


More information about the Snort-sigs mailing list