Open Side Menu
Skip to contentImmersive Community
Home
Help
Blogs
Events & Media
Challenges
Private Groups
  1. Immersive Community
  2. Help
  3. Help

Forum Discussion

retornet's avatar
retornet
Bronze III
1 year ago
Solved

Snort Rules: Ep.7 – Lokibot Infection Traffic

I need help with the last question please. I tried so many rules and I am still getting it wrong 13-Create a Snort rule to detect this User-Agent string in the HTTP header for connections using po...
application security
challenges
cyber range exercises
cyber ranges
defensive cyber
feedback
help & support
offensive cyber
other
questions & feedback
  • retornet's avatar
    retornet
    1 year ago

    the port number should be the source instead of dst 

retornet's avatar
retornet
Bronze III
1 year ago

I finally got it 

Featured Places

Help

Related Content
  • Re: SuperSonic: Ep.6 – TEMPLE
    1 year ago
    pbogu
  • Modern Encryption: Demonstrate Your Skills (Q9)
    10 months ago
    GuyIncognito
  • Re: FIN7 Threat Hunting with Splunk: Execution Analysis
    1 month ago
    SamDickison
  • Re: Threat Hunting Mining Behaviour - Question 1
    1 year ago
    KieranRowley
  • New CTI Lab: Lotus Blossom Notepad ++ Campaign: Analysis
    8 months ago
    benhopkins

Recent Discussions

  • Ran19's avatar
    Reverse shell task
    1 day ago
    Ran19
  • kevinh's avatar
    DFIR CTF: LightNeuron DLL - Question 8
    1 day ago
    kevinh
  • SD169's avatar
    Subject: Practice Lab Recommendations – NHS England Cyber Security Assessment
    2 days ago
    SD169
  • alinplavit's avatar
    What is the string of 16 bytes that make up the partition information?
    Solved
    20 days ago
    alinplavit
  • Goutam13's avatar
    need to find the correct answer for a question in "ISO 27014 - Governance of Information Security"
    25 days ago
    Goutam13
Community HomePrivacy PolicyHelp
Powered By Khoros