Snort mailing list archives
Re: Sig to Detect Flame worm
From: Nigel Houghton <nhoughton () sourcefire com>
Date: Wed, 30 May 2012 07:46:10 -0400
On May 30, 2012, at 6:19 AM, yew chuan Ong wrote:
Hi All, I have read through VRT blog and it mentioned that signatures with IDs from 23019 to 23038 are able to detect the latest Flame worm. I have downloaded the latest rule set and found nothing. Is it yet to release? Thanks!
They will be released today. -- Nigel Houghton Head Mentalist, Time Lord SF VRT Department of Intelligence Excellence http://vrt-blog.snort.org/ && http://labs.snort.org/
Attachment:
signature.asc
Description: Message signed with OpenPGP using GPGMail
------------------------------------------------------------------------------ Live Security Virtual Conference Exclusive live event will cover all the ways today's security and threat landscape has changed and how IT managers can respond. Discussions will include endpoint security, mobile security and the latest in malware threats. http://www.accelacomm.com/jaw/sfrnl04242012/114/50122263/
_______________________________________________ Snort-sigs mailing list Snort-sigs () lists sourceforge net https://lists.sourceforge.net/lists/listinfo/snort-sigs http://www.snort.org Please visit http://blog.snort.org for the latest news about Snort!
Current thread:
- Sig to Detect Flame worm yew chuan Ong (May 30)
- Re: Sig to Detect Flame worm Nigel Houghton (May 30)