Well on his blog explains one of his very complex rules. I suggest you go take a look at it, and let him explain what he did in his PCRE.
Technorati Tags: Snort
Saturday, April 8
Brian Caswell explains one of his PCRE rules.
A guy that works over here at Sourcefire, where I work, Brian Caswell, is one of our masterful VRT guys. (Research Team) -- Writes our very complex rules.
Well on his blog explains one of his very complex rules. I suggest you go take a look at it, and let him explain what he did in his PCRE.
Well on his blog explains one of his very complex rules. I suggest you go take a look at it, and let him explain what he did in his PCRE.
Subscribe to:
Post Comments (Atom)
-
Without going off the deep-end here and discussing every single Snort rule keyword, I just wanted to touch on a few modifiers that people so... -
While on MacOS (and iOS) you can use the Share Sheet from Safari to share a webpage to Notes, it only shares the title, URL, and the favicon...
-
National Post Damn this makes me mad. The Runaway Bride is going to cash in... grrr..
No comments:
Post a Comment