[Snort-sigs] Hotbar

From: Rowland, Krisa W ERDC-ITL-MS Contractor <Krisa.W.Rowland(at)erdc.usace.army.mil>
Date: Thu Mar 18 2004 - 15:58:49 EST

Does anyone have a better alert for Hotbar than this? I mean - this just keys on Hotbar - so if you just google for Hotbar you set off 30 alerts!  

alert ip any any -> any any (msg:"Malware hotbar";content:"hotbar";nocase;)

Krisa Rowland
ERDC Information Assurance Team
(SAIC Contractor)
3909 Halls Ferry Rd., Bldg. 8000
Vicksburg, MS 39180
601-634-2493
krisa.w.rowland@erdc.usace.army.mil  

---

This SF.Net email is sponsored by: IBM Linux Tutorials Free Linux tutorial presented by Daniel Robbins, President and CEO of GenToo technologies. Learn everything from fundamentals to system administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click

---

Snort-sigs mailing list
Snort-sigs@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/snort-sigs Received on Thu Mar 18 16:15:54 2004