Well on his blog explains one of his very complex rules. I suggest you go take a look at it, and let him explain what he did in his PCRE.
Technorati Tags: Snort
Saturday, April 8
Brian Caswell explains one of his PCRE rules.
A guy that works over here at Sourcefire, where I work, Brian Caswell, is one of our masterful VRT guys. (Research Team) -- Writes our very complex rules.
Well on his blog explains one of his very complex rules. I suggest you go take a look at it, and let him explain what he did in his PCRE.
Well on his blog explains one of his very complex rules. I suggest you go take a look at it, and let him explain what he did in his PCRE.
Subscribe to:
Post Comments (Atom)
-
Without going off the deep-end here and discussing every single Snort rule keyword, I just wanted to touch on a few modifiers that people so... -
Let me start off by saying I'm not bashing the writer of this article, and I'm trying not to be super critical. I don't want to...
-
In my constant state of trying to make things a bit more efficient for myself. (I'm a big believer in automation, ask anyone that has e...
No comments:
Post a Comment