Fw: Snort Rules

[alex dina <alexander_dina () yahoo com>]

Alex Dina 
Network Security Engineer, CISSP, CISM 
301-404-5312

----- Forwarded Message -----
From: alex dina <alexander_dina () yahoo com>
To: "Snort-sigs () lists sourceforge net" <Snort-sigs () lists sourceforge net> 
Sent: Thursday, February 14, 2013 2:07 PM
Subject: Snort Rules 
 


Also, can you please explain what these rule are looking for in a data packet? Thank you!


alert tcp any any -> any any (msg:"Taidoor trojan -
notify Threat Cell"; content:"GET /"; content:".asp?est=";
content:"&hn="; content:"&ha="; sid:4200455;
rev:1;)

------------------------------------------------------------------------------
Free Next-Gen Firewall Hardware Offer
Buy your Sophos next-gen firewall before the end March 2013 
and get the hardware for free! Learn more.
http://p.sf.net/sfu/sophos-d2d-feb

_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
http://www.snort.org


Please visit http://blog.snort.org for the latest news about Snort!