[Snort-users] key-logging patterns

mflyger at ...6385... mflyger at ...6385...
Fri Jul 19 16:30:02 EDT 2002

Hello all:

Are there any established packet patterns for known key-logging programs (i.e.,
programs which capture keyboard input and, say, broadcast it over port 80 to a
cracker's server)?  We'd love to be able to detect that kind of activity since
we really aren't staffed for scanning interdepartmental users' computers.


This mail sent through IMP: http://horde.org/imp/

More information about the Snort-users mailing list