[Snort-sigs] SID 39379 Norton Antivirus ASPack

Charlie Dyer charlierwdyer at ...2420...
Mon Feb 13 15:01:50 EST 2017

Hello list

Could anyone shed light on the rule 39379?

I can't see any content matching, it simply alerts on any file that is an
executable being downloaded, is that right?
If so, what has this got to do with Norton Antivirus?

Many thanks in advance.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-sigs/attachments/20170213/c639f7db/attachment.html>

More information about the Snort-sigs mailing list