Snort mailing list archives

Re: Mandiant APT1 Report


From: Joel Esler <jesler () sourcefire com>
Date: Tue, 19 Feb 2013 16:23:28 -0500

We have some rules coming out in today's package for this, more coming.   

-- 
Joel Esler
Senior Research Engineer, VRT
Open Source Community Manager


On Tuesday, February 19, 2013 at 11:59 AM, James Lay wrote:

Enlightening...the FQDN and Certs Appendices are interesting as well:

http://intelreport.mandiant.com/

James

------------------------------------------------------------------------------
Everyone hates slow websites. So do we.
Make your web apps faster with AppDynamics
Download AppDynamics Lite for free today:
http://p.sf.net/sfu/appdyn_d2d_feb
_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
http://www.snort.org


Please visit http://blog.snort.org for the latest news about Snort! 

------------------------------------------------------------------------------
Everyone hates slow websites. So do we.
Make your web apps faster with AppDynamics
Download AppDynamics Lite for free today:
http://p.sf.net/sfu/appdyn_d2d_feb
_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
http://www.snort.org


Please visit http://blog.snort.org for the latest news about Snort!

Current thread: