Snort mailing list archives

Re: Snort 3 rules - Antivirus


From: Joel Esler via Snort-sigs <snort-sigs () lists snort org>
Date: Mon, 12 Jun 2023 09:39:47 -0400

I would probably file a false positive report with Microsoft for Defender.  Snort rules should not trigger an AV 
signature. 

— 
Sent from my iPhone

On Jun 12, 2023, at 09:35, Rostanin Gleb SBR DIRCS via Snort-sigs <snort-sigs () lists snort org> wrote:


Dear Snort community,

 

I recently registered to be able to download the Snort 3 rules. Unfortunately, when downloading, Windows defender 
started complaining that a Virus was detected. Is this normal behavior or am I currently being attacked 😃?

 

Kind regards

 

Gerry

_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists snort org
https://lists.snort.org/mailman/listinfo/snort-sigs

Please visit http://blog.snort.org for the latest news about Snort!

Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette

Visit the Snort.org to subscribe to the official Snort ruleset, make sure to stay up to date to catch the most <a 
href=" https://snort.org/downloads/#rule-downloads";>emerging threats</a>!
_______________________________________________
Snort-sigs mailing list
Snort-sigs () lists snort org
https://lists.snort.org/mailman/listinfo/snort-sigs

Please visit http://blog.snort.org for the latest news about Snort!

Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette

Visit the Snort.org to subscribe to the official Snort ruleset, make sure to stay up to date to catch the most <a 
href=" https://snort.org/downloads/#rule-downloads";>emerging threats</a>!

Current thread: