Forum Discussion

retornet's avatar
retornet
Icon for Bronze III rankBronze III
2 months ago
Solved

Snort Rules: Ep.7 – Lokibot Infection Traffic

I need help with the last question please. I tried so many rules and I am still getting it wrong 13-Create a Snort rule to detect this User-Agent string in the HTTP header for connections using po...
  • retornet's avatar
    2 months ago

    the port number should be the source instead of dst