[Snort-sigs] [Snort-users] Snort Rule

wkitty42 at windstream.net wkitty42 at windstream.net
Thu Mar 29 10:53:43 EDT 2018


On 03/29/2018 09:14 AM, Joel Esler (jesler) via Snort-sigs wrote:
> You probably need to look at ClamAV,  not Snort.


or a tool kit like root kit hunter which, IIRC, does checksums and compares with 
them... i know there's something out there because some corporate environments 
use it but i just can't think of the name right now :(


-- 
  NOTE: No off-list assistance is given without prior approval.
        *Please keep mailing list traffic on the list unless*
        *a signed and pre-paid contract is in effect with us.*


More information about the Snort-sigs mailing list