3) Given the following Sort rule, describe what it does? alert tcp $EXTERNAL_NET any -> 10.200.0.0/24 80 (msg:"WEB-IIS
Posted: Fri Jul 01, 2022 5:42 am
3) Given the following Sort rule, describe what itdoes? alert tcp $EXTERNAL_NET any -> 10.200.0.0/24 80 (msg:"WEB-IISCodeRed v2 root.exe access"; flow:to_server,established;uricontent:"/root.exe"; nocase; classtype:web application-attack;reference:url,www.cert.org/advisories/CA-2001 19.html; sid:1255;rev:7;) Url to assist: Snort Basics: How to Read and Write Snort Rules,Part 1 (hackers-arise.com)