alert tcp $EXTERNAL_NET 1024:65535 -> $HOME_NET 1024:65535 (msg:"BLEEDING-EDGE CURRENT_EVENTS Unknown Bot C&C Channel -- Please report to bleeding@bleedingthreats.net"; flowbits:isset,BS.unknown.2; flow:established,from_server; dsize:64; classtype:trojan-activity; tag:session; sid:2006360; rev:1;)

Added 2007-06-22 01:15:54 UTC


Topic revision: r1 - 2008-01-08 - TWikiGuest
 
This site is powered by the TWiki collaboration platform Powered by Perl This site is powered by the TWiki collaboration platformCopyright © Emerging Threats