Email Tracking Code Signature

[Simeon Bush <Sbush () stas fbi gov>]

I was wondering if snort has the capability to detect a tracking code in an email source code. I'm sure this 
rule/signature  would be expensive in terms of resource utilization. I've noticed that targeted phishing emails will 
have these embedded into the source code as a callback.

------------------------------------------------------------------------------
The demand for IT networking professionals continues to grow, and the
demand for specialized networking skills is growing even more rapidly.
Take a complimentary Learning@Cisco Self-Assessment and learn 
about Cisco certifications, training, and career opportunities. 
http://p.sf.net/sfu/cisco-dev2dev

_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
http://www.snort.org


Please visit http://blog.snort.org for the latest news about Snort!