[Snort-sigs] new rule 40268

Johnson, John jj at ...4181...
Mon Sep 26 14:49:55 EDT 2016


   Hey.

   The new rule 40268 (9/22/16) has triggered a couple of times here and I'm not really convinced its not a false positive.
  I see a match on the 32 characters in an email - what else can I do to verify this is a legitimate hit?

-j
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-sigs/attachments/20160926/c87379ee/attachment.html>


More information about the Snort-sigs mailing list