[prev in list] [next in list] [prev in thread] [next in thread] 

List:       snort-sigs
Subject:    Re: [Snort-sigs] Rig Exploit Kit outbound URI request signature
From:       Geoffrey Serrao <gserrao () sourcefire ! com>
Date:       2014-07-10 16:52:22
Message-ID: CAHh=g=xrq9ZzapGOwqY_=-qiqoSh5iMiBRXYbdhCG=sXp2esGQ () mail ! gmail ! com
[Download RAW message or body]

[Attachment #2 (multipart/alternative)]


Absolutely, that's the plan.


On Thu, Jul 10, 2014 at 12:42 PM, lists@packetmail.net <lists@packetmail.net
> wrote:

> On 07/10/2014 11:39 AM, Geoffrey Serrao wrote:
> > Ideally I'd like to include at least a 'depth' modifier or 'urilen'
> before the
> > content match. We shall see what comes out of testing!
>
> Good stuff -- if my data helps mind releasing these under VRT COMMUNITY?
>  Thanks
>
> Cheers,
> Nathan Fowler
>

[Attachment #5 (text/html)]

<div dir="ltr">Absolutely, that&#39;s the plan.  </div><div \
class="gmail_extra"><br><br><div class="gmail_quote">On Thu, Jul 10, 2014 at 12:42 \
PM, <a href="mailto:lists@packetmail.net">lists@packetmail.net</a> <span \
dir="ltr">&lt;<a href="mailto:lists@packetmail.net" \
target="_blank">lists@packetmail.net</a>&gt;</span> wrote:<br> <blockquote \
class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc \
solid;padding-left:1ex"><div class="">On 07/10/2014 11:39 AM, Geoffrey Serrao \
wrote:<br> &gt; Ideally I&#39;d like to include at least a &#39;depth&#39; modifier \
or &#39;urilen&#39; before the<br> &gt; content match. We shall see what comes out of \
testing!<br> <br>
</div>Good stuff -- if my data helps mind releasing these under VRT COMMUNITY?   \
Thanks<br> <br>
Cheers,<br>
Nathan Fowler<br>
</blockquote></div><br></div>



------------------------------------------------------------------------------
Open source business process management suite built on Java and Eclipse
Turn processes into business applications with Bonita BPM Community Edition
Quickly connect people, data, and systems into organized workflows
Winner of BOSSIE, CODIE, OW2 and Gartner awards
http://p.sf.net/sfu/Bonitasoft

_______________________________________________
Snort-sigs mailing list
Snort-sigs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
http://www.snort.org


Please visit http://blog.snort.org for the latest news about Snort!

[prev in list] [next in list] [prev in thread] [next in thread]