Forum Discussion

retornet's avatar
retornet
Icon for Bronze III rankBronze III
22 days ago
Solved

Snort Rules: Ep.7 – Lokibot Infection Traffic

I need help with the last question please. I tried so many rules and I am still getting it wrong 13-Create a Snort rule to detect this User-Agent string in the HTTP header for connections using po...
  • retornet's avatar
    22 days ago

    the port number should be the source instead of dst