Snort mailing list archives
Re: [Snort-users] Snort Rule
From: wkitty42 () windstream net
Date: Thu, 29 Mar 2018 10:53:43 -0400
On 03/29/2018 09:14 AM, Joel Esler (jesler) via Snort-sigs wrote:
You probably need to look at ClamAV, not Snort.
or a tool kit like root kit hunter which, IIRC, does checksums and compares with them... i know there's something out there because some corporate environments use it but i just can't think of the name right now :(
-- NOTE: No off-list assistance is given without prior approval. *Please keep mailing list traffic on the list unless* *a signed and pre-paid contract is in effect with us.* _______________________________________________ Snort-sigs mailing list Snort-sigs () lists snort org https://lists.snort.org/mailman/listinfo/snort-sigs Please visit http://blog.snort.org for the latest news about Snort! Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette Visit the Snort.org to subscribe to the official Snort ruleset, make sure to stay up to date to catch the most <a href=" https://snort.org/downloads/#rule-downloads">emerging threats</a>!
Current thread:
- Snort Rule Shane Corridon via Snort-users (Mar 29)
- Re: Snort Rule wkitty42 (Mar 29)
- Re: Snort Rule Shane Corridon via Snort-users (Mar 29)
- Re: Snort Rule Al Lewis (allewi) via Snort-users (Mar 29)
- Re: Snort Rule Shane Corridon via Snort-users (Mar 29)
- Re: [Snort-users] Snort Rule Joel Esler (jesler) via Snort-sigs (Mar 29)
- Re: [Snort-users] Snort Rule wkitty42 (Mar 29)
- Re: Snort Rule Shane Corridon via Snort-sigs (Mar 31)
- Re: [Snort-sigs] Snort Rule Joel Esler (jesler) via Snort-users (Mar 31)
- Re: Snort Rule wkitty42 (Mar 29)