Documents

The following setup guides have been contributed by members of the Snort Community for your use. Comments and questions on these documents should be submitted directly to the author by clicking on their names below.


Latest rule documents - Search
1:63074
This rule looks for requests to the ConnectWise ScreenConnect "/SetupWizard.aspx" endpoint that are intended to bypass authentication checks for this resource.
1:63072
This rule looks for words unique to the phishing email.
1:63071
This rule looks for bytes unique to the malware binaries.
1:63070
This rule looks for bytes unique to the malware binaries.
1:63069
This rule looks for bytes unique to the malware binaries.
1:63068
This rule looks for bytes unique to the malware binaries.