Snort mailing list archives
Re: Info on 26266-26271?
From: Nick Randolph <drandolph () sourcefire com>
Date: Fri, 19 Apr 2013 10:32:02 -0400
They look for domains that have been generated using the domain generation algorithm implemented in Zeus. On Fri, Apr 19, 2013 at 10:23 AM, Klein, Michael <Michael.Klein () state sd us>wrote:
All, looking for a bit of information regarding signatures 26266 – 26271. **** ** ** Wondering if there’s some documentation, or maybe a breakdown of what exactly this is looking for, as the rules are fairly beefy!**** ** ** Mike**** ------------------------------------------------------------------------------ Precog is a next-generation analytics platform capable of advanced analytics on semi-structured data. The platform includes APIs for building apps and a phenomenal toolset for data science. Developers can use our toolset for easy data analysis & visualization. Get a free account! http://www2.precog.com/precogplatform/slashdotnewsletter _______________________________________________ Snort-sigs mailing list Snort-sigs () lists sourceforge net https://lists.sourceforge.net/lists/listinfo/snort-sigs http://www.snort.org Please visit http://blog.snort.org for the latest news about Snort!
-- Nick Randolph Research Engineer Sourcefire, Inc. nrandolph () sourcefire com Sourcefire.com <http://www.sourcefire.com/>
------------------------------------------------------------------------------ Precog is a next-generation analytics platform capable of advanced analytics on semi-structured data. The platform includes APIs for building apps and a phenomenal toolset for data science. Developers can use our toolset for easy data analysis & visualization. Get a free account! http://www2.precog.com/precogplatform/slashdotnewsletter
_______________________________________________ Snort-sigs mailing list Snort-sigs () lists sourceforge net https://lists.sourceforge.net/lists/listinfo/snort-sigs http://www.snort.org Please visit http://blog.snort.org for the latest news about Snort!
Current thread:
- Info on 26266-26271? Klein, Michael (Apr 19)
- Re: Info on 26266-26271? Nick Randolph (Apr 19)