[Snort-sigs] Feasibility question

James Lay jlay at ...3266...
Thu Dec 4 14:18:19 EST 2014

Hey All,

So as I go about reverse engineering here, a common theme is seeing 
PADDINGXX within exe's....would it be feasible to make a sig to match on 
executable for this?  Thanks.


More information about the Snort-sigs mailing list