Metasploit SMB2.0 exploit detection rule

alert any any -> any 445 (flow:established, to_server; content:”|00000352ff534d4272000000001853c81702|”; offset:0; depth:18)

About this entry

You’re currently reading “Metasploit SMB2.0 exploit detection rule,” an entry on Snort rules

게시일:
9월 30, 2009 / 5:54 pm
카테고리:
Rule Create
태그:
, ,