Snort mailing list archives

RE: cmd.exe


From: "Potts, Ross A." <RPOTTS () NORTHROPGRUMMAN COM>
Date: Mon, 29 Apr 2002 03:56:37 -0700

I've gotten a bunch from them.

-----Original Message-----
From: Ronald Prins [mailto:prins () fox-it com]
Sent: Monday, April 29, 2002 4:36 AM
To: snort-users () lists sourceforge net
Subject: [Snort-users] cmd.exe


We are monitoring multiple sensors for a number of customers (The
Netherlands). We noticed a recent increase in the number of SID: 1002
"cmd.exe" attempts. 

Have others noticed the same?

Ronald.


_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users


Current thread: