Snort mailing list archives
DCSYNC rule
From: James Lay via Snort-sigs <snort-sigs () lists snort org>
Date: Fri, 28 Feb 2020 08:36:06 -0700
Anyone know if this was updated? https://blog.didierstevens.com/2017/10/08/quickpost-mimikatz-dcsync-detection/ IN a recent engagement I did not see this hit. Thank you! James _______________________________________________ Snort-sigs mailing list Snort-sigs () lists snort org https://lists.snort.org/mailman/listinfo/snort-sigs Please visit http://blog.snort.org for the latest news about Snort! Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette Visit the Snort.org to subscribe to the official Snort ruleset, make sure to stay up to date to catch the most <a href=" https://snort.org/downloads/#rule-downloads">emerging threats</a>!
Current thread:
- DCSYNC rule James Lay via Snort-sigs (Feb 28)
- Message not available
- Re: [Emerging-Sigs] DCSYNC rule James Lay via Snort-sigs (Feb 28)
- Message not available
- <Possible follow-ups>
- DCSync rule James Lay via Snort-sigs (Mar 02)