[Snort-sigs] DC related SNORT sig groups

Elliot Anderson new.http.451 at ...2420...
Mon Apr 11 09:24:03 EDT 2016


Hey,

a quick question - anyone did any project or went for initiative to monitor their Domain Controller environment with the IDS (snort sigs)? I guess what I am looking for is ability to come up with specific ruleset  or rule groups to be used in DC environment (DC related attacks, Win2003/2008 vulnerabilities, etc.).

Thanks,
Elliot



More information about the Snort-sigs mailing list