neonprimetime security , just trying to help

I previously wrote about documentation-less snort rules . Below is my attempt to fill in some of those gaps. Whomever created this dns que...

I previously wrote about documentation-less snort rules . Below is my attempt to fill in some of those gaps. Whomever created these trojan...

I previously wrote about documentation-less snort rules . Below is my attempt to fill in some of those gaps. Whomever created these exploi...

I previously wrote about documentation-less snort rules . Below is my attempt to fill in some of those gaps. Whomever created these trojan...

I previously wrote about documentation-less snort rules . Below is my attempt to fill in some of those gaps. Whomever created these trojan...

I previously wrote about documentation-less snort rules . Below is my attempt to fill in some of those gaps. Whomever created these trojan...

I previously wrote about documentation-less snort rules . Below is my attempt to fill in some of those gaps. Whomever created these trojan...

I previously wrote about documentation-less snort rules . Below is my attempt to fill in some of those gaps. Whomever created this sednit ...

I previously wrote about documentation-less snort rules . Below is my attempt to fill in some of those gaps. Whomever created this locky r...

I previously wrote about documentation-less snort rules . Below is my attempt to fill in some of those gaps. Whomever created this Disttra...

I previously wrote about documentation-less snort rules . Below is my attempt to fill in some of those gaps. Whomever created this default...

I previously wrote about documentation-less snort rules . Below is my attempt to fill in some of those gaps. Whomever created this DDoS sn...

I previously wrote about documentation-less snort rules . Below is my attempt to fill in some of those gaps. Whomever created these 2 new ...

Has anybody else noticed that what seems like the majority of new snort rules that come out and you can use in an IDS (intrusion detection s...

I think some Snort rules like these could be used to monitor specific user-agents that sometimes are common with recon, vulnerability scans,...

What are they? These links give some background seclist and stack exchange . That rule is a "truffle," which means it detect...

This snort rule triggered from this post request and I thought I'd walk through why it triggered. $HOME_NET any -> $EXTERNAL_NET $H...

Quick little run down of a Boaxxe Snort rule and why it fired. Hopefully it's useful for those researching Boaxxe as well as for those j...