[Snort-users] Automated File Carving?

Joel Esler jesler at ...1935...
Fri Aug 17 14:23:06 EDT 2012


On Wed, Aug 08, 2012 at 03:48:22PM -0400, Marcos Rodriguez wrote:
> On Wed, Aug 8, 2012 at 3:19 PM, Tim Covel <tcovel at ...15149...> wrote:
> I'm not sure, but I thought (I'm a bit befuddled, so beware when I
> think!!!!)  that Snort could do this in conjunction with Razorback. 

You are correct.  This is exactly what Razorback was designed for.  Along with a little thing like automated file analysis.

--
Joel Esler
Senior Research Engineer, VRT
OpenSource Community Manager
Sourcefire




More information about the Snort-users mailing list