Home page logo
/

snort logo Snort mailing list archives

Re: Info on 26266-26271?
From: Nick Randolph <drandolph () sourcefire com>
Date: Fri, 19 Apr 2013 10:32:02 -0400

They look for domains that have been generated using the domain generation
algorithm implemented in Zeus.


On Fri, Apr 19, 2013 at 10:23 AM, Klein, Michael
<Michael.Klein () state sd us>wrote:

 All, looking for a bit of information regarding signatures 26266 – 26271.
****

** **

Wondering if there’s some documentation, or maybe a breakdown of what
exactly this is looking for, as the rules are fairly beefy!****

** **

Mike****


------------------------------------------------------------------------------
Precog is a next-generation analytics platform capable of advanced
analytics on semi-structured data. The platform includes APIs for building
apps and a phenomenal toolset for data science. Developers can use
our toolset for easy data analysis & visualization. Get a free account!
http://www2.precog.com/precogplatform/slashdotnewsletter
_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
http://www.snort.org


Please visit http://blog.snort.org for the latest news about Snort!




-- 

Nick Randolph
Research Engineer
Sourcefire, Inc.
nrandolph () sourcefire com
Sourcefire.com <http://www.sourcefire.com/>
------------------------------------------------------------------------------
Precog is a next-generation analytics platform capable of advanced
analytics on semi-structured data. The platform includes APIs for building
apps and a phenomenal toolset for data science. Developers can use
our toolset for easy data analysis & visualization. Get a free account!
http://www2.precog.com/precogplatform/slashdotnewsletter
_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists sourceforge net
https://lists.sourceforge.net/lists/listinfo/snort-sigs
http://www.snort.org


Please visit http://blog.snort.org for the latest news about Snort!

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]