[Snort-users] Vista activation signature

John York YorkJ at ...7109...
Thu Apr 3 11:21:59 EDT 2008

We tried to activate a second KMS server for Vista and found that all of
our 6 activations had been used up.  It appears that one of our techs
used the key to activate machines directly with MS instead of through
the KMS server.  So far I've been unable to find exactly where these
activations go to.  Does anyone have a signature that detects Vista
activation attempts?

John York
Network Engineer
Blue Ridge Community College
1 College Lane, Weyers Cave, VA 24486

More information about the Snort-users mailing list