[Snort-users] Snort Rule

wkitty42 at windstream.net wkitty42 at windstream.net
Thu Mar 29 09:09:24 EDT 2018


On 03/29/2018 08:33 AM, Shane Corridon via Snort-users wrote:
> Hi All,
> 
> I am looking for a rule to scan the computer after a new program has been 
> installed and return any alarming results or return an "Everything is normal" 
> result.


snort is not the right tool for this... snort only sniffs network traffic and 
packet capture (aka pcap) files of network traffic...


-- 
  NOTE: No off-list assistance is given without prior approval.
        *Please keep mailing list traffic on the list unless*
        *a signed and pre-paid contract is in effect with us.*


More information about the Snort-users mailing list