[Snort-sigs] Rig Exploit Kit outbound URI request signature

Geoffrey Serrao gserrao at ...435...
Thu Jul 10 12:52:22 EDT 2014


Absolutely, that's the plan.


On Thu, Jul 10, 2014 at 12:42 PM, lists at ...3397... <lists at ...3397...
> wrote:

> On 07/10/2014 11:39 AM, Geoffrey Serrao wrote:
> > Ideally I'd like to include at least a 'depth' modifier or 'urilen'
> before the
> > content match. We shall see what comes out of testing!
>
> Good stuff -- if my data helps mind releasing these under VRT COMMUNITY?
>  Thanks
>
> Cheers,
> Nathan Fowler
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-sigs/attachments/20140710/068eb360/attachment.html>


More information about the Snort-sigs mailing list