Re: Proposed Signature for Keystrokes iKeyMonitor iOS Keylogger

[Matt Jonkman <jonkman () emergingthreatspro com>]

Fixing, we didn't post on the ET side, was waiting on an answer on the question privately. :)

Thanks Nathan!

Matt


On Mar 21, 2012, at 3:22 PM, Community Signatures wrote:

> On 03/21/12 14:18, Bad Horse wrote:
> > Hello.  Wouldn't this be "from_server" and not "to_server" along with
> > "$HOME_NET any -> any any" ?
> >
> > I could be not understanding this though but if the page is being served
> > I think it should be "from_server".
>
> 100% correct Bad Horse, thank you, and apologies to all for this
> mistake.  I appreciate the peer review and this mistake was made on the
> ET side as well, would you mind correcting it there too?
>
> Thanks,
> Nathan
>
> ------------------------------------------------------------------------------
> This SF email is sponsosred by:
> Try Windows Azure free for 90 days Click Here 
> http://p.sf.net/sfu/sfd2d-msazure
> _______________________________________________
> Snort-sigs mailing list
> Snort-sigs () lists sourceforge net
> https://lists.sourceforge.net/lists/listinfo/snort-sigs
> http://www.snort.org
>
>
> Please visit http://blog.snort.org for the latest news about Snort!


----------------------------------------------------
Matt Jonkman
Emerging Threats Pro
Open Information Security Foundation (OISF)
Phone 866-504-2523 x110
http://www.emergingthreatspro.com
http://www.openinfosecfoundation.org
----------------------------------------------------


------------------------------------------------------------------------------
This SF email is sponsosred by:
Try Windows Azure free for 90 days Click Here 
http://p.sf.net/sfu/sfd2d-msazure
_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
http://www.snort.org


Please visit http://blog.snort.org for the latest news about Snort!