3) Given the following Sort rule, describe what it does? alert tcp $EXTERNAL_NET any -> 10.200.0.0/24 80 (msg:"WEB-IIS
-
answerhappygod
- Site Admin
- Posts: 899603
- Joined: Mon Aug 02, 2021 8:13 am
3) Given the following Sort rule, describe what it does? alert tcp $EXTERNAL_NET any -> 10.200.0.0/24 80 (msg:"WEB-IIS
3) Given the following Sort rule, describe what itdoes? alert tcp $EXTERNAL_NET any -> 10.200.0.0/24 80 (msg:"WEB-IISCodeRed v2 root.exe access"; flow:to_server,established;uricontent:"/root.exe"; nocase; classtype:web application-attack;reference:url,www.cert.org/advisories/CA-2001 19.html; sid:1255;rev:7;) Url to assist: Snort Basics: How to Read and Write Snort Rules,Part 1 (hackers-arise.com)