Open Side Menu
Skip to contentBrand Logo
Home
Help
Blogs
Events
Challenges
Private Groups
  1. Immersive Community
  2. Help
  3. Help

Forum Discussion

retornet's avatar
retornet
Bronze III
7 months ago
Solved

Snort Rules: Ep.7 – Lokibot Infection Traffic

I need help with the last question please. I tried so many rules and I am still getting it wrong 13-Create a Snort rule to detect this User-Agent string in the HTTP header for connections using po...
application security
challenges
cyber range exercises
cyber ranges
defensive cyber
feedback
help & support
offensive cyber
other
questions & feedback
  • retornet's avatar
    retornet
    7 months ago

    the port number should be the source instead of dst 

retornet's avatar
retornet
Bronze III
7 months ago

I finally got it 

Featured Places

Help

Related Content
  • Re: SuperSonic: Ep.6 – TEMPLE
    1 year ago
    pbogu
  • Modern Encryption: Demonstrate Your Skills (Q9)
    3 months ago
    GuyIncognito
  • Re: Threat Hunting Mining Behaviour - Question 1
    1 year ago
    KieranRowley
  • New CTI Labs: Ruby Jumper Campaign: Analysis and Threat Actors: APT37
    10 days ago
    benhopkins
  • Re: The Human Connection Challenge: Season 1 Episode 6 Is Now Live!
    10 months ago
    netcat

Recent Discussions

  • jcberlan's avatar
    Trick or Treat on Specter Street: Widow's Web
    2 days ago
    jcberlan
  • kevinh's avatar
    CTI First Principles: Threat Actors and Attribution Question 8
    2 days ago
    kevinh
  • jpdelval's avatar
    Gemini CLI Lab issue
    2 days ago
    jpdelval
  • ArthurDent's avatar
    Microsoft Foundry Guardrails: Jailbreak Protection issue with http://metroliochat.com
    Solved
    3 days ago
    ArthurDent
  • FOB_10's avatar
    Create Teams for Students and assign tasks to be completed
    3 days ago
    FOB_10
Community HomePrivacy PolicyHelp
Powered By Khoros