A guy that works over here at Sourcefire, where I work, Brian Caswell, is one of our masterful VRT guys. (Research Team) -- Writes our very complex rules.
Well on his blog explains one of his very complex rules. I suggest you go take a look at it, and let him explain what he did in his PCRE.
No comments:
Post a Comment