December 2009 Archives by author

• Messages sorted by: [ thread ] [ subject ] [ date ]
• More info on this list...

Starting: Tue Dec 1 01:46:37 EDT 2009
Ending: Thu Dec 31 19:49:41 EDT 2009
Messages: 505

• [Emerging-Sigs] Google DNS servers   Christopher Biettchert
• [Emerging-Sigs] Google DNS servers   Christopher Biettchert
• [Emerging-Sigs] Malwareurl.com Top 30 Update   Jaime Blasco
• [Emerging-Sigs] Successful Adobe 0-day download   Jaime Blasco
• [Emerging-Sigs] Successful Adobe 0-day download   Jaime Blasco
• [Emerging-Sigs] Successful Adobe 0-day download   Jaime Blasco
• [Emerging-Sigs] Hex is or is not human-readable?   J Carvalho
• [Emerging-Sigs] [Snort-users] Suricata IDS Available for Download!   Brian Caswell
• [Emerging-Sigs] Successful Adobe 0-day download   Daniel Clemens
• [Emerging-Sigs] Successful Adobe 0-day download   Daniel Clemens
• [Emerging-Sigs] Joomla sql injection sig   Mike Cox
• [Emerging-Sigs] Malwareurl.com Top 30 Update   Mike Cox
• [Emerging-Sigs] ET TROJAN Potential Gemini/Fake AV Download URL Detected   Mike Cox
• [Emerging-Sigs] Is the VRT ruleset worth it?   Mike Cox
• [Emerging-Sigs] 2 Cisco Sigs   Mike Cox
• [Emerging-Sigs] RFI exploit successful   Mike Cox
• [Emerging-Sigs] RFI exploit successful   Mike Cox
• [Emerging-Sigs] Generic XSS Detection (was: Re: 2 Cisco Sigs)   Mike Cox
• [Emerging-Sigs] Morfeus F Scanner User-Agent   Mike Cox
• [Emerging-Sigs] Suspicious User-Agent: iexplore   Mike Cox
• [Emerging-Sigs] FPs on General DNS Changer Checkin   Mike Cox
• [Emerging-Sigs] IE Referer header for HTTP 302 redirectes   Mike Cox
• [Emerging-Sigs] Sonicwall NSA E7500 XSS   Mike Cox
• [Emerging-Sigs] Sonicwall Global Management System XSS attempt   Mike Cox
• [Emerging-Sigs] Proposed Sig, Fake AV (FakeSmoke), http://isc.sans.org/diary.html?storyid=7768   Mike Cox
• [Emerging-Sigs] Blind SQL Injection and RFI sigs   Mike Cox
• [Emerging-Sigs] Possible XSS Attempt in HTTP 4xx and 5xx response code pages   Mike Cox
• [Emerging-Sigs] Malwareurl.com Top 30 Update   Mike Cox
• [Emerging-Sigs] SIG   Mike Cox
• [Emerging-Sigs] Multiple Joomla SQL Injection signatures   Mike Cox
• [Emerging-Sigs] F3Site2009 Multiple LFI Exploit signatures   Mike Cox
• [Emerging-Sigs] Multiple Joomla SQL Injection signatures   Mike Cox
• [Emerging-Sigs] Unknown Fake AV Checkin   Mike Cox
• [Emerging-Sigs] Fake AV download URI access   Mike Cox
• [Emerging-Sigs] Unknown Fake AV Checkin   Mike Cox
• [Emerging-Sigs] HP Open View Data Protector Buffer Overflow Attempt   Mike Cox
• [Emerging-Sigs] HP Open View Data Protector Buffer Overflow Attempt   Mike Cox
• [Emerging-Sigs] Barracuda Web Application Firewall 600 XSS attempt   Mike Cox
• [Emerging-Sigs] iPhone Bot iKee.B Contacting C&C   Mike Cox
• [Emerging-Sigs] HP-Nuke Module Emporium SQL Injection Attempt   Mike Cox
• [Emerging-Sigs] SIG Netgear DG632 Web Management Denial Of Service Attempt   Mike Cox
• [Emerging-Sigs] Fake AV download URI access   Mike Cox
• [Emerging-Sigs] Pragyan CMS search.php moduleFolder Parameter Remote File Inclusion   Mike Cox
• [Emerging-Sigs] 35mm Slide Gallery imgdir Parameter Directory Traversal   Mike Cox
• [Emerging-Sigs] 35mm Slide Gallery imgdir Parameter Directory Traversal   Mike Cox
• [Emerging-Sigs] 35mm Slide Gallery imgdir Parameter Directory Traversal   Mike Cox
• [Emerging-Sigs] ClarkConnect Linux proxy.php XSS Attempt   Mike Cox
• [Emerging-Sigs] ET WEB_SPECIFIC_APPS rules (multiple SQLi + LFI)   Mike Cox
• [Emerging-Sigs] Google DNS servers   CunningPike
• [Emerging-Sigs] 2007711: ET TROJAN Srizbi registering with controller   CunningPike
• [Emerging-Sigs] 2007711: ET TROJAN Srizbi registering withcontroller   CunningPike
• [Emerging-Sigs] 2007711: ET TROJAN Srizbi registering withcontroller   CunningPike
• [Emerging-Sigs] 2007711: ET TROJAN Srizbi registering withcontroller   CunningPike
• [Emerging-Sigs] Fake AV download URI access   CunningPike
• [Emerging-Sigs] NTP mode 7 denial-of-service vulnerability   David.R.Wharton at regions.com
• [Emerging-Sigs] Contest and Quality -- was: 35mm Slide Gallery imgdir Parameter Directory Traversal   David.R.Wharton at regions.com
• [Emerging-Sigs] jennylab.rules   Alberto Garcia de Dios
• [Emerging-Sigs] jennylab.rules   Alberto Garcia de Dios
• [Emerging-Sigs] [Snort-users] Suricata IDS Available for Download!   Jules Pagna Disso
• [Emerging-Sigs] ET TROJAN Potential Gemini/Fake AV Download URL Detected   Joel Esler
• [Emerging-Sigs] ET TROJAN Potential Gemini/Fake AV Download URL Detected   Joel Esler
• [Emerging-Sigs] Google DNS servers   Joel Esler
• [Emerging-Sigs] Google DNS servers   Joel Esler
• [Emerging-Sigs] What would you like to see?   Joel Esler
• [Emerging-Sigs] What would you like to see?   Joel Esler
• [Emerging-Sigs] What would you like to see?   Joel Esler
• [Emerging-Sigs] What would you like to see?   Joel Esler
• [Emerging-Sigs] What would you like to see?   Joel Esler
• [Emerging-Sigs] Proposed Signature - User Agent Vundo   Joel Esler
• [Emerging-Sigs] Proposed Signature - User Agent Vundo   Joel Esler
• [Emerging-Sigs] Proposed Signature - User Agent Vundo   Joel Esler
• [Emerging-Sigs] Proposed Signature - User Agent Vundo   Joel Esler
• [Emerging-Sigs] Proposed Signature - User Agent Vundo   Joel Esler
• [Emerging-Sigs] Proposed Signature - User Agent Vundo   Joel Esler
• [Emerging-Sigs] Successful Adobe 0-day download   Joel Esler
• [Emerging-Sigs] Successful Adobe 0-day download   Joel Esler
• [Emerging-Sigs] What would you like to see?   Joel Esler
• [Emerging-Sigs] Proposed Signature - User Agent Vundo   Joel Esler
• [Emerging-Sigs] Proposed Signature - User Agent Vundo   Joel Esler
• [Emerging-Sigs] Proposed Signature - User Agent Vundo   Joel Esler
• [Emerging-Sigs] Proposed Signature - User Agent Vundo   Joel Esler
• [Emerging-Sigs] Proposed Signature - User Agent Vundo   Joel Esler
• [Emerging-Sigs] What would you like to see?   Joel Esler
• [Emerging-Sigs] Adobe Sig Update   Joel Esler
• [Emerging-Sigs] What would you like to see?   Joel Esler
• [Emerging-Sigs] What would you like to see?   Joel Esler
• [Emerging-Sigs] Adobe sig performance update   Joel Esler
• [Emerging-Sigs] What would you like to see?   Joel Esler
• [Emerging-Sigs] What would you like to see?   Joel Esler
• [Emerging-Sigs] What would you like to see?   Joel Esler
• [Emerging-Sigs] 2 Cisco Sigs   Joel Esler
• [Emerging-Sigs] 2 Cisco Sigs   Joel Esler
• [Emerging-Sigs] Hex is or is not human-readable?   Joel Esler
• [Emerging-Sigs] SIG Netgear DG632 Web Management Denial Of Service Attempt   Joel Esler
• [Emerging-Sigs] counterterrorism sigs   Joel Esler
• [Emerging-Sigs] counterterrorism sigs   Joel Esler
• [Emerging-Sigs] counterterrorism sigs   Joel Esler
• [Emerging-Sigs] counterterrorism sigs   Joel Esler
• [Emerging-Sigs] counterterrorism sigs   Joel Esler
• [Emerging-Sigs] First Release of Suricata Available Tomorrow!   Edward Bjarte Fjellskål
• [Emerging-Sigs] Joomla sql injection sig   Russell Fulton
• [Emerging-Sigs] Is the VRT ruleset worth it?   Russell Fulton
• [Emerging-Sigs] alerting on responses (was- Is the VRT ruleset worth it?)   Russell Fulton
• [Emerging-Sigs] alerting on responses (rfi-based)   Russell Fulton
• [Emerging-Sigs] Successful Adobe 0-day download   David Glosser
• [Emerging-Sigs] ET TROJAN Potential Gemini/Fake AV Download URL Detected   Chris Green
• [Emerging-Sigs] Possible Storm Variants?   Packet Hack
• [Emerging-Sigs] FP   Bojan Zdrnja (SANS ISC)
• [Emerging-Sigs] MSSQL False Neg   Bill Scherr IV
• [Emerging-Sigs] Google DNS servers   Bill Scherr IV
• [Emerging-Sigs] What would you like to see?   John Jacobs
• [Emerging-Sigs] 35mm Slide Gallery imgdir Parameter Directory Traversal   John Jacobs
• [Emerging-Sigs] Modern day communication, joy oh joy   Kayvan Javid
• [Emerging-Sigs] Is the VRT ruleset worth it?   Matt Jonkman
• [Emerging-Sigs] Malwareurl.com Top 30 Update   Matt Jonkman
• [Emerging-Sigs] Malwareurl.com Top 30 Update   Matt Jonkman
• [Emerging-Sigs] Malwareurl.com Top 30 Update   Matt Jonkman
• [Emerging-Sigs] ET TROJAN Potential Gemini/Fake AV Download URL Detected   Matt Jonkman
• [Emerging-Sigs] ET TROJAN Potential Gemini/Fake AV Download URL Detected   Matt Jonkman
• [Emerging-Sigs] Back At it   Matt Jonkman
• [Emerging-Sigs] Malwareurl.com Top 30 Update   Matt Jonkman
• [Emerging-Sigs] FP [Fwd: alert: New event: ET USER_AGENTS Suspicious Mozilla User-Agent - Likely Fake (Mozilla/5.0)]   Matt Jonkman
• [Emerging-Sigs] Mugs Available!   Matt Jonkman
• [Emerging-Sigs] what has happened to 2002997 / ET WEB PHP Remote File Inclusion (monster list http)   Matt Jonkman
• [Emerging-Sigs] 2007711: ET TROJAN Srizbi registering withcontroller   Matt Jonkman
• [Emerging-Sigs] 2007711: ET TROJAN Srizbi registering withcontroller   Matt Jonkman
• [Emerging-Sigs] sigs   Matt Jonkman
• [Emerging-Sigs] 2 Cisco Sigs   Matt Jonkman
• [Emerging-Sigs] wooo I got the sig right   Matt Jonkman
• [Emerging-Sigs] Morfeus F Scanner User-Agent   Matt Jonkman
• [Emerging-Sigs] 2 Cisco Sigs   Matt Jonkman
• [Emerging-Sigs] 2007711: ET TROJAN Srizbi registering withcontroller   Matt Jonkman
• [Emerging-Sigs] SIG: Barracuda IM Firewall XSS   Matt Jonkman
• [Emerging-Sigs] RFI exploit successful   Matt Jonkman
• [Emerging-Sigs] Malwareurl.com Top 30 Update   Matt Jonkman
• [Emerging-Sigs] Suspicious User-Agent: iexplore   Matt Jonkman
• [Emerging-Sigs] FPs on General DNS Changer Checkin   Matt Jonkman
• [Emerging-Sigs] FPs on General DNS Changer Checkin   Matt Jonkman
• [Emerging-Sigs] StillSecure: 10 New Signatures - Dec - 14 - 2009   Matt Jonkman
• [Emerging-Sigs] NTP mode 7 denial-of-service vulnerability   Matt Jonkman
• [Emerging-Sigs] NTP mode 7 denial-of-service vulnerability   Matt Jonkman
• [Emerging-Sigs] some modifications for sid:2002677 / nikto-detection   Matt Jonkman
• [Emerging-Sigs] What would you like to see?   Matt Jonkman
• [Emerging-Sigs] What would you like to see?   Matt Jonkman
• [Emerging-Sigs] Proposed Signature - User Agent Vundo   Matt Jonkman
• [Emerging-Sigs] Proposed Signature - User Agent Vundo   Matt Jonkman
• [Emerging-Sigs] Proposed Signature - User Agent Vundo   Matt Jonkman
• [Emerging-Sigs] SIGS   Matt Jonkman
• [Emerging-Sigs] Proposed Signature - User Agent Vundo   Matt Jonkman
• [Emerging-Sigs] NTP mode 7 denial-of-service vulnerability   Matt Jonkman
• [Emerging-Sigs] Proposed Signature - User Agent Vundo   Matt Jonkman
• [Emerging-Sigs] Proposed Signature - User Agent Vundo   Matt Jonkman
• [Emerging-Sigs] Proposed Signature - User Agent Vundo   Matt Jonkman
• [Emerging-Sigs] Successful Adobe 0-day download   Matt Jonkman
• [Emerging-Sigs] Successful Adobe 0-day download   Matt Jonkman
• [Emerging-Sigs] Proposed Sig: Successful Adobe 0-day download   Matt Jonkman
• [Emerging-Sigs] What would you like to see?   Matt Jonkman
• [Emerging-Sigs] Proposed Signature - User Agent Vundo   Matt Jonkman
• [Emerging-Sigs] Proposed Signature - User Agent Vundo   Matt Jonkman
• [Emerging-Sigs] Facebook inbound spam update   Matt Jonkman
• [Emerging-Sigs] Facebook inbound spam update   Matt Jonkman
• [Emerging-Sigs] Adobe Sig Update   Matt Jonkman
• [Emerging-Sigs] Adobe Spelling Mistake in msg:   Matt Jonkman
• [Emerging-Sigs] What would you like to see?   Matt Jonkman
• [Emerging-Sigs] What would you like to see?   Matt Jonkman
• [Emerging-Sigs] Adobe Sig Update   Matt Jonkman
• [Emerging-Sigs] Adobe sig performance update   Matt Jonkman
• [Emerging-Sigs] some question on sigs   Matt Jonkman
• [Emerging-Sigs] Proposed Signatures; Palevo   Matt Jonkman
• [Emerging-Sigs] Shirts, Mugs and Lanyards for Christmas!   Matt Jonkman
• [Emerging-Sigs] Proposed Signatures; Palevo   Matt Jonkman
• [Emerging-Sigs] The OISF Welcomes Kerio as a new Consortium Member!   Matt Jonkman
• [Emerging-Sigs] Sig   Matt Jonkman
• [Emerging-Sigs] 2 Cisco Sigs   Matt Jonkman
• [Emerging-Sigs] some more modifications on scanner-sigs   Matt Jonkman
• [Emerging-Sigs] Sonicwall NSA E7500 XSS   Matt Jonkman
• [Emerging-Sigs] We have an Official Name and Mascot for the OISF Engine!   Matt Jonkman
• [Emerging-Sigs] SIG: Ossim Command Execution Sig   Matt Jonkman
• [Emerging-Sigs] Clod/Sereki trojan sigs   Matt Jonkman
• [Emerging-Sigs] SIG: Ossim Command Execution Sig   Matt Jonkman
• [Emerging-Sigs] 2003196 ET EXPLOIT FTP .message FP's   Matt Jonkman
• [Emerging-Sigs] 2003196 ET EXPLOIT FTP .message FP's   Matt Jonkman
• [Emerging-Sigs] 2003196 ET EXPLOIT FTP .message FP's   Matt Jonkman
• [Emerging-Sigs] Proposed Sig, Fake AV (FakeSmoke), http://isc.sans.org/diary.html?storyid=7768   Matt Jonkman
• [Emerging-Sigs] 2003196 ET EXPLOIT FTP .message FP's   Matt Jonkman
• [Emerging-Sigs] Possible XSS Attempt in HTTP 4xx and 5xx response code pages   Matt Jonkman
• [Emerging-Sigs] Blind SQL Injection and RFI sigs   Matt Jonkman
• [Emerging-Sigs] SIG   Matt Jonkman
• [Emerging-Sigs] SIG   Matt Jonkman
• [Emerging-Sigs] Malwareurl.com Top 30 Update   Matt Jonkman
• [Emerging-Sigs] Multiple Joomla SQL Injection signatures   Matt Jonkman
• [Emerging-Sigs] F3Site2009 Multiple LFI Exploit signatures   Matt Jonkman
• [Emerging-Sigs] Proposed Sig, Fake AV (FakeSmoke), http://isc.sans.org/diary.html?storyid=7768   Matt Jonkman
• [Emerging-Sigs] Unknown Fake AV Checkin   Matt Jonkman
• [Emerging-Sigs] HP Open View Data Protector Buffer Overflow Attempt   Matt Jonkman
• [Emerging-Sigs] Barracuda Web Application Firewall 600 XSS attempt   Matt Jonkman
• [Emerging-Sigs] iPhone Bot iKee.B Contacting C&C   Matt Jonkman
• [Emerging-Sigs] Fake AV download URI access   Matt Jonkman
• [Emerging-Sigs] Yet another empty IP set   Matt Jonkman
• [Emerging-Sigs] HP-Nuke Module Emporium SQL Injection Attempt   Matt Jonkman
• [Emerging-Sigs] SIG Netgear DG632 Web Management Denial Of Service Attempt   Matt Jonkman
• [Emerging-Sigs] StillSecure: 10 New Signatures - Dec - 24 - 2009   Matt Jonkman
• [Emerging-Sigs] Yet another empty IP set   Matt Jonkman
• [Emerging-Sigs] counterterrorism sigs   Matt Jonkman
• [Emerging-Sigs] counterterrorism sigs   Matt Jonkman
• [Emerging-Sigs] Sigs: IIS Filename Extension Parsing Security Byspass Attempt   Matt Jonkman
• [Emerging-Sigs] Sigs: IIS Filename Extension Parsing Security Byspass Attempt   Matt Jonkman
• [Emerging-Sigs] counterterrorism sigs   Matt Jonkman
• [Emerging-Sigs] Proposed Signature; FakeAV Check-in   Matt Jonkman
• [Emerging-Sigs] IIS Vuln, SIDs 2010593 & 2010592   Matt Jonkman
• [Emerging-Sigs] Proposed Signature; FakeAV Check-in   Matt Jonkman
• [Emerging-Sigs] 35mm Slide Gallery imgdir Parameter Directory Traversal   Matt Jonkman
• [Emerging-Sigs] Contest and Quality -- was: 35mm Slide Gallery imgdir Parameter Directory Traversal   Matt Jonkman
• [Emerging-Sigs] ClarkConnect Linux proxy.php XSS Attempt   Matt Jonkman
• [Emerging-Sigs] First Release of Suricata Available Tomorrow!   Matt Jonkman
• [Emerging-Sigs] First Release of Suricata Available Tomorrow!   Matt Jonkman
• [Emerging-Sigs] Suricata IDS Available for Download!   Matt Jonkman
• [Emerging-Sigs] [Snort-users] Suricata IDS Available for Download!   Matt Jonkman
• [Emerging-Sigs] 3 sigs   Matthew Jonkman
• [Emerging-Sigs] More external SMTP bad attachments   Matthew Jonkman
• [Emerging-Sigs] some sigs for JBOSS / JMX-Console   Matthew Jonkman
• [Emerging-Sigs] Two new signatures (Bredolab + FakeAV), and and proposed modification to SID 2009354   Matthew Jonkman
• [Emerging-Sigs] jennylab.rules   Matthew Jonkman
• [Emerging-Sigs] jennylab.rules   Matthew Jonkman
• [Emerging-Sigs] jennylab.rules - Shell Thread   Matthew Jonkman
• [Emerging-Sigs] Proposed Changes to ET Trojan Data Post to an Image File, SIDs 2010066 to 2010070   Matthew Jonkman
• [Emerging-Sigs] 4 sigs   Matthew Jonkman
• [Emerging-Sigs] JustExploit   Matthew Jonkman
• [Emerging-Sigs] Sig for acc0751b17add453c44c93c3e59673f4   Matthew Jonkman
• [Emerging-Sigs] November Sig Contest   Matthew Jonkman
• [Emerging-Sigs] Malwareurl.com Top 30 Update   Matthew Jonkman
• [Emerging-Sigs] RBN sigs?   Matthew Jonkman
• [Emerging-Sigs] Possible Storm Variants?   Matthew Jonkman
• [Emerging-Sigs] Possible Storm Variants?   Matthew Jonkman
• [Emerging-Sigs] What would you like to see?   Frank Knobbe
• [Emerging-Sigs] SIG: Barracuda IM Firewall XSS   Frank Knobbe
• [Emerging-Sigs] FP [Fwd: alert: New event: ET USER_AGENTS Suspicious Mozilla User-Agent - Likely Fake (Mozilla/5.0)]   Frank Knobbe
• [Emerging-Sigs] FP [Fwd: alert: New event: ET USER_AGENTS Suspicious Mozilla User-Agent - Likely Fake (Mozilla/5.0)]   Frank Knobbe
• [Emerging-Sigs] 2 Cisco Sigs   Frank Knobbe
• [Emerging-Sigs] 2 Cisco Sigs   Frank Knobbe
• [Emerging-Sigs] Proposed Signature - User Agent Vundo   Frank Knobbe
• [Emerging-Sigs] Proposed Signature - User Agent Vundo   Frank Knobbe
• [Emerging-Sigs] Clod/Sereki trojan sigs   Frank Knobbe
• [Emerging-Sigs] Fake AV download URI access   Frank Knobbe
• [Emerging-Sigs] Fake AV download URI access   Frank Knobbe
• [Emerging-Sigs] counterterrorism sigs   Frank Knobbe
• [Emerging-Sigs] FP   James Lay
• [Emerging-Sigs] FP   James Lay
• [Emerging-Sigs] Yet another empty IP set   James Lay
• [Emerging-Sigs] Yet another empty IP set   James Lay
• [Emerging-Sigs] NTP mode 7 denial-of-service vulnerability   John Liss
• [Emerging-Sigs] NTP mode 7 denial-of-service vulnerability   John Liss
• [Emerging-Sigs] Proposed Signature - User Agent Vundo   John Liss
• [Emerging-Sigs] counterterrorism sigs   Mike Lococo
• [Emerging-Sigs] Emerging-sigs Digest, Vol 25, Issue 115   Lohin, Daniel [USA]
• [Emerging-Sigs] [Fwd: Re: jennylab.rules]   Markus Manzke
• [Emerging-Sigs] Is the VRT ruleset worth it?   Guise McAllaster
• [Emerging-Sigs] Fwd: [Snort-sigs] stream5 and use_static_footprint_sizes   Guise McAllaster
• [Emerging-Sigs] What would you like to see?   Guise McAllaster
• [Emerging-Sigs] 2 Cisco Sigs   Guise McAllaster
• [Emerging-Sigs] 2 Cisco Sigs   Guise McAllaster
• [Emerging-Sigs] Hex is or is not human-readable? (was: Re: 2 Cisco Sigs)   Guise McAllaster
• [Emerging-Sigs] Contest and Quality -- was: 35mm Slide Gallery imgdir Parameter Directory Traversal   Guise McAllaster
• [Emerging-Sigs] counterterrorism sigs   James McQuaid
• [Emerging-Sigs] counterterrorism sigs   James McQuaid
• [Emerging-Sigs] Google DNS servers   Eoin Miller
• [Emerging-Sigs] Google DNS servers   Rodrigo Montoro(Sp0oKeR)
• [Emerging-Sigs] Is the VRT ruleset worth it?   Rodrigo Montoro(Sp0oKeR)
• [Emerging-Sigs] 2003196 ET EXPLOIT FTP .message FP's   Thomas Mueller
• [Emerging-Sigs] 2003196 ET EXPLOIT FTP .message FP's   Thomas Mueller
• [Emerging-Sigs] [Snort-users] TCP Portals: The Handshake's a Lie!   Matt Olney
• [Emerging-Sigs] [Snort-users] TCP Portals: The Handshake's a Lie!   Matt Olney
• [Emerging-Sigs] What would you like to see?   Matt Olney
• [Emerging-Sigs] [Snort-users] Suricata IDS Available for Download!   Matt Olney
• [Emerging-Sigs] Generic union/select SQL injection rule   Overlander
• [Emerging-Sigs] What would you like to see?   Mike Patterson
• [Emerging-Sigs] Hex is or is not human-readable? (was: Re: 2 Cisco Sigs)   Mike Patterson
• [Emerging-Sigs] FP on 2003055   Jack Pepper
• [Emerging-Sigs] RBN sigs?   Jack Pepper
• [Emerging-Sigs] Google DNS servers   Jack Pepper
• [Emerging-Sigs] Google DNS servers   Jack Pepper
• [Emerging-Sigs] Google DNS servers   Jack Pepper
• [Emerging-Sigs] [Fwd: eBay Procedural Warning - Security Alert]   Jamie Riden
• [Emerging-Sigs] 3 sigs   Kevin Ross
• [Emerging-Sigs] sig improvement   Kevin Ross
• [Emerging-Sigs] 1 new sig and some improvements   Kevin Ross
• [Emerging-Sigs] Malwareurl.com Top 30 Update   Kevin Ross
• [Emerging-Sigs] Malwareurl.com Top 30 Update   Kevin Ross
• [Emerging-Sigs] sigs   Kevin Ross
• [Emerging-Sigs] 2 Cisco Sigs   Kevin Ross
• [Emerging-Sigs] SIG: Barracuda IM Firewall XSS   Kevin Ross
• [Emerging-Sigs] Generic XSS Detection (was: Re: 2 Cisco Sigs)   Kevin Ross
• [Emerging-Sigs] wooo I got the sig right   Kevin Ross
• [Emerging-Sigs] MYSQL Sigs (cve,2009-4019 and Brute Force)   Kevin Ross
• [Emerging-Sigs] SIGS   Kevin Ross
• [Emerging-Sigs] Proposed Signature - User Agent Vundo   Kevin Ross
• [Emerging-Sigs] Successful Adobe 0-day download   Kevin Ross
• [Emerging-Sigs] Successful Adobe 0-day download   Kevin Ross
• [Emerging-Sigs] Successful Adobe 0-day download   Kevin Ross
• [Emerging-Sigs] Adobe Sig Update   Kevin Ross
• [Emerging-Sigs] Adobe Sig Update   Kevin Ross
• [Emerging-Sigs] Adobe Spelling Mistake in msg:   Kevin Ross
• [Emerging-Sigs] Adobe sig performance update   Kevin Ross
• [Emerging-Sigs] Adobe sig performance update   Kevin Ross
• [Emerging-Sigs] some question on sigs   Kevin Ross
• [Emerging-Sigs] Adobe sig performance update   Kevin Ross
• [Emerging-Sigs] 2 Cisco Sigs   Kevin Ross
• [Emerging-Sigs] Sig   Kevin Ross
• [Emerging-Sigs] 2 Cisco Sigs   Kevin Ross
• [Emerging-Sigs] question: IDS evasion require_3whs   Kevin Ross
• [Emerging-Sigs] SIG: Ossim Command Execution Sig   Kevin Ross
• [Emerging-Sigs] SIG   Kevin Ross
• [Emerging-Sigs] Repeated sig?   Kevin Ross
• [Emerging-Sigs] SIG Netgear DG632 Web Management Denial Of Service Attempt   Kevin Ross
• [Emerging-Sigs] SIG Netgear DG632 Web Management Denial Of Service Attempt   Kevin Ross
• [Emerging-Sigs] Sigs: IIS Filename Extension Parsing Security Byspass Attempt   Kevin Ross
• [Emerging-Sigs] Adobe NewPlayer Sig Feedback   Kevin Ross
• [Emerging-Sigs] counterterrorism sigs   Kevin Ross
• [Emerging-Sigs] What would you like to see?   Rich Rumble
• [Emerging-Sigs] question: IDS evasion require_3whs   John Sawyer
• [Emerging-Sigs] Is the VRT ruleset worth it?   Michael Scheidell
• [Emerging-Sigs] here's an interesting web exploit attempt, server variables   Michael Scheidell
• [Emerging-Sigs] FP [Fwd: alert: New event: ET USER_AGENTS Suspicious Mozilla User-Agent - Likely Fake (Mozilla/5.0)]   Michael Scheidell
• [Emerging-Sigs] RFI exploit successful   Michael Scheidell
• [Emerging-Sigs] FPs on General DNS Changer Checkin   Michael Scheidell
• [Emerging-Sigs] NTP mode 7 denial-of-service vulnerability   Michael Scheidell
• [Emerging-Sigs] NTP mode 7 denial-of-service vulnerability   Michael Scheidell
• [Emerging-Sigs] FP [Fwd: alert: New event: ET USER_AGENTS Suspicious Mozilla User-Agent - Likely Fake (Mozilla/5.0)]   Michael Scheidell
• [Emerging-Sigs] counterterrorism sigs   Michael Scheidell
• [Emerging-Sigs] counterterrorism sigs   Michael Scheidell
• [Emerging-Sigs] MYSQL Sigs (cve,2009-4019 and Brute Force)   MARE system | Security
• [Emerging-Sigs] Two new signatures (Bredolab + FakeAV), and and proposed modification to SID 2009354   Darren Spruell
• [Emerging-Sigs] Two new signatures (Bredolab + FakeAV), and and proposed modification to SID 2009354   Darren Spruell
• [Emerging-Sigs] Clod/Sereki trojan sigs   Darren Spruell
• [Emerging-Sigs] More external SMTP bad attachments   Weir, Jason
• [Emerging-Sigs] More external SMTP bad attachments   Weir, Jason
• [Emerging-Sigs] RBN sigs?   Weir, Jason
• [Emerging-Sigs] RBN sigs?   Weir, Jason
• [Emerging-Sigs] FP on 2003055   Weir, Jason
• [Emerging-Sigs] FP on 2003055   Weir, Jason
• [Emerging-Sigs] Malwareurl.com Top 30 Update   Weir, Jason
• [Emerging-Sigs] Malwareurl.com update   Weir, Jason
• [Emerging-Sigs] RBN sigs?   Weir, Jason
• [Emerging-Sigs] RBN sigs?   Weir, Jason
• [Emerging-Sigs] Back At it   Weir, Jason
• [Emerging-Sigs] Facebook inbound spam update   Weir, Jason
• [Emerging-Sigs] Malwareurl.com Top 30 Update   Weir, Jason
• [Emerging-Sigs] Fwd: [Snort-sigs] stream5 and use_static_footprint_sizes   David Wharton
• [Emerging-Sigs] Facebook inbound spam update   Wolvee
• [Emerging-Sigs] Facebook inbound spam update   Wolvee
• [Emerging-Sigs] Emerging Threats Daily Signature Changes   emerging at emergingthreats.net
• [Emerging-Sigs] Emerging Threats Daily Signature Changes   emerging at emergingthreats.net
• [Emerging-Sigs] Emerging Threats Daily Signature Changes   emerging at emergingthreats.net
• [Emerging-Sigs] Emerging Threats Daily Signature Changes   emerging at emergingthreats.net
• [Emerging-Sigs] Emerging Threats Daily Signature Changes   emerging at emergingthreats.net
• [Emerging-Sigs] Emerging Threats Weekly Signature Changes   emerging at emergingthreats.net
• [Emerging-Sigs] Emerging Threats Daily Signature Changes   emerging at emergingthreats.net
• [Emerging-Sigs] Emerging Threats Daily Signature Changes   emerging at emergingthreats.net
• [Emerging-Sigs] Emerging Threats Daily Signature Changes   emerging at emergingthreats.net
• [Emerging-Sigs] Emerging Threats Daily Signature Changes   emerging at emergingthreats.net
• [Emerging-Sigs] Emerging Threats Daily Signature Changes   emerging at emergingthreats.net
• [Emerging-Sigs] Emerging Threats Daily Signature Changes   emerging at emergingthreats.net
• [Emerging-Sigs] Emerging Threats Daily Signature Changes   emerging at emergingthreats.net
• [Emerging-Sigs] Emerging Threats Weekly Signature Changes   emerging at emergingthreats.net
• [Emerging-Sigs] Emerging Threats Daily Signature Changes   emerging at emergingthreats.net
• [Emerging-Sigs] Emerging Threats Daily Signature Changes   emerging at emergingthreats.net
• [Emerging-Sigs] Emerging Threats Daily Signature Changes   emerging at emergingthreats.net
• [Emerging-Sigs] Emerging Threats Daily Signature Changes   emerging at emergingthreats.net
• [Emerging-Sigs] Emerging Threats Daily Signature Changes   emerging at emergingthreats.net
• [Emerging-Sigs] Emerging Threats Daily Signature Changes   emerging at emergingthreats.net
• [Emerging-Sigs] Emerging Threats Daily Signature Changes   emerging at emergingthreats.net
• [Emerging-Sigs] Emerging Threats Weekly Signature Changes   emerging at emergingthreats.net
• [Emerging-Sigs] Emerging Threats Daily Signature Changes   emerging at emergingthreats.net
• [Emerging-Sigs] Emerging Threats Daily Signature Changes   emerging at emergingthreats.net
• [Emerging-Sigs] Emerging Threats Daily Signature Changes   emerging at emergingthreats.net
• [Emerging-Sigs] Emerging Threats Daily Signature Changes   emerging at emergingthreats.net
• [Emerging-Sigs] Emerging Threats Daily Signature Changes   emerging at emergingthreats.net
• [Emerging-Sigs] Emerging Threats Daily Signature Changes   emerging at emergingthreats.net
• [Emerging-Sigs] Emerging Threats Daily Signature Changes   emerging at emergingthreats.net
• [Emerging-Sigs] Emerging Threats Weekly Signature Changes   emerging at emergingthreats.net
• [Emerging-Sigs] Emerging Threats Daily Signature Changes   emerging at emergingthreats.net
• [Emerging-Sigs] Emerging Threats Daily Signature Changes   emerging at emergingthreats.net
• [Emerging-Sigs] Emerging Threats Daily Signature Changes   emerging at emergingthreats.net
• [Emerging-Sigs] Emerging Threats Daily Signature Changes   emerging at emergingthreats.net
• [Emerging-Sigs] Emerging Threats Daily Signature Changes   emerging at emergingthreats.net
• [Emerging-Sigs] jennylab.rules   evilghost at packetmail.net
• [Emerging-Sigs] Proposed Changes to ET Trojan Data Post to an Image File, SIDs 2010066 to 2010070   evilghost at packetmail.net
• [Emerging-Sigs] November Sig Contest   evilghost at packetmail.net
• [Emerging-Sigs] Possible Storm Variants?   evilghost at packetmail.net
• [Emerging-Sigs] Possible Storm Variants?   evilghost at packetmail.net
• [Emerging-Sigs] ET TROJAN Potential Gemini/Fake AV Download URL Detected   evilghost at packetmail.net
• [Emerging-Sigs] ET TROJAN Potential Gemini/Fake AV Download URL Detected   evilghost at packetmail.net
• [Emerging-Sigs] ET TROJAN Potential Gemini/Fake AV Download URL Detected   evilghost at packetmail.net
• [Emerging-Sigs] Google DNS servers   evilghost at packetmail.net
• [Emerging-Sigs] Malwareurl.com Top 30 Update   evilghost at packetmail.net
• [Emerging-Sigs] 2007711: ET TROJAN Srizbi registering withcontroller   evilghost at packetmail.net
• [Emerging-Sigs] 2007711: ET TROJAN Srizbi registeringwithcontroller   evilghost at packetmail.net
• [Emerging-Sigs] 2 Cisco Sigs   evilghost at packetmail.net
• [Emerging-Sigs] 2 Cisco Sigs   evilghost at packetmail.net
• [Emerging-Sigs] Morfeus F Scanner User-Agent   evilghost at packetmail.net
• [Emerging-Sigs] Malwareurl.com Top 30 Update   evilghost at packetmail.net
• [Emerging-Sigs] FPs on General DNS Changer Checkin   evilghost at packetmail.net
• [Emerging-Sigs] MYSQL Sigs (cve,2009-4019 and Brute Force)   evilghost at packetmail.net
• [Emerging-Sigs] What would you like to see?   evilghost at packetmail.net
• [Emerging-Sigs] NTP mode 7 denial-of-service vulnerability   evilghost at packetmail.net
• [Emerging-Sigs] Proposed Signature - User Agent Vundo   evilghost at packetmail.net
• [Emerging-Sigs] Proposed Signature - User Agent Vundo   evilghost at packetmail.net
• [Emerging-Sigs] Proposed Signature - User Agent Vundo   evilghost at packetmail.net
• [Emerging-Sigs] Proposed Signature - User Agent Vundo   evilghost at packetmail.net
• [Emerging-Sigs] Proposed Sig: Successful Adobe 0-day download   evilghost at packetmail.net
• [Emerging-Sigs] What would you like to see?   evilghost at packetmail.net
• [Emerging-Sigs] Adobe sig performance update   evilghost at packetmail.net
• [Emerging-Sigs] What would you like to see?   evilghost at packetmail.net
• [Emerging-Sigs] Proposed Signatures; Palevo   evilghost at packetmail.net
• [Emerging-Sigs] Proposed Signatures; Palevo   evilghost at packetmail.net
• [Emerging-Sigs] 2 Cisco Sigs   evilghost at packetmail.net
• [Emerging-Sigs] 2 Cisco Sigs   evilghost at packetmail.net
• [Emerging-Sigs] Hex is or is not human-readable?   evilghost at packetmail.net
• [Emerging-Sigs] Proposed Signature - User Agent Vundo   evilghost at packetmail.net
• [Emerging-Sigs] Proposed Signature - User Agent Vundo   evilghost at packetmail.net
• [Emerging-Sigs] 2 Cisco Sigs   evilghost at packetmail.net
• [Emerging-Sigs] SIG: Ossim Command Execution Sig   evilghost at packetmail.net
• [Emerging-Sigs] SIG: Ossim Command Execution Sig   evilghost at packetmail.net
• [Emerging-Sigs] SIG: Ossim Command Execution Sig   evilghost at packetmail.net
• [Emerging-Sigs] 2003196 ET EXPLOIT FTP .message FP's   evilghost at packetmail.net
• [Emerging-Sigs] 2003196 ET EXPLOIT FTP .message FP's   evilghost at packetmail.net
• [Emerging-Sigs] Proposed Sig, Fake AV (FakeSmoke), http://isc.sans.org/diary.html?storyid=7768   evilghost at packetmail.net
• [Emerging-Sigs] Unknown Fake AV Checkin   evilghost at packetmail.net
• [Emerging-Sigs] Unknown Fake AV Checkin   evilghost at packetmail.net
• [Emerging-Sigs] SIG Netgear DG632 Web Management Denial Of Service Attempt   evilghost at packetmail.net
• [Emerging-Sigs] SIG Netgear DG632 Web Management Denial Of Service Attempt   evilghost at packetmail.net
• [Emerging-Sigs] counterterrorism sigs   evilghost at packetmail.net
• [Emerging-Sigs] Sigs: IIS Filename Extension Parsing Security Byspass Attempt   evilghost at packetmail.net
• [Emerging-Sigs] Proposed Signature; FakeAV Check-in   evilghost at packetmail.net
• [Emerging-Sigs] Proposed Signature; FakeAV Check-in   evilghost at packetmail.net
• [Emerging-Sigs] Proposed Signature; FakeAV Check-in   evilghost at packetmail.net
• [Emerging-Sigs] Proposed Signature; FakeAV Check-in   evilghost at packetmail.net
• [Emerging-Sigs] IIS Vuln, SIDs 2010593 & 2010592   evilghost at packetmail.net
• [Emerging-Sigs] Proposed Signature; FakeAV Check-in   evilghost at packetmail.net
• [Emerging-Sigs] Proposed Signature; FakeAV Check-in   evilghost at packetmail.net
• [Emerging-Sigs] 35mm Slide Gallery imgdir Parameter Directory Traversal   evilghost at packetmail.net
• [Emerging-Sigs] 35mm Slide Gallery imgdir Parameter Directory Traversal   evilghost at packetmail.net
• [Emerging-Sigs] 35mm Slide Gallery imgdir Parameter Directory Traversal   evilghost at packetmail.net
• [Emerging-Sigs] Two new signatures (Bredolab + FakeAV), and and proposed modification to SID 2009354   gilou
• [Emerging-Sigs] Malwareurl.com Top 30 Update   jason.weir at nhrs.org
• [Emerging-Sigs] Malwareurl.com Top 30 Update   jason.weir at nhrs.org
• [Emerging-Sigs] Malwareurl.com Top 30 Update   jason.weir at nhrs.org
• [Emerging-Sigs] Malwareurl.com Top 30 Update   jason.weir at nhrs.org
• [Emerging-Sigs] RBN sigs?   waldo kitty
• [Emerging-Sigs] Malwareurl.com Top 30 Update   waldo kitty
• [Emerging-Sigs] Is the VRT ruleset worth it?   waldo kitty
• [Emerging-Sigs] Malwareurl.com Top 30 Update   waldo kitty
• [Emerging-Sigs] what has happened to 2002997 / ET WEB PHP Remote File Inclusion (monster list http)   waldo kitty
• [Emerging-Sigs] Fwd: [Snort-sigs] stream5 and use_static_footprint_sizes   waldo kitty
• [Emerging-Sigs] Fwd: [Snort-sigs] stream5 and use_static_footprint_sizes   waldo kitty
• [Emerging-Sigs] FPs on General DNS Changer Checkin   waldo kitty
• [Emerging-Sigs] NTP mode 7 denial-of-service vulnerability   waldo kitty
• [Emerging-Sigs] NTP mode 7 denial-of-service vulnerability   waldo kitty
• [Emerging-Sigs] NTP mode 7 denial-of-service vulnerability   waldo kitty
• [Emerging-Sigs] NTP mode 7 denial-of-service vulnerability   waldo kitty
• [Emerging-Sigs] NTP mode 7 denial-of-service vulnerability   waldo kitty
• [Emerging-Sigs] MYSQL Sigs (cve,2009-4019 and Brute Force)   waldo kitty
• [Emerging-Sigs] NTP mode 7 denial-of-service vulnerability   waldo kitty
• [Emerging-Sigs] NTP mode 7 denial-of-service vulnerability   waldo kitty
• [Emerging-Sigs] Proposed Signature - User Agent Vundo   waldo kitty
• [Emerging-Sigs] Successful Adobe 0-day download   waldo kitty
• [Emerging-Sigs] Proposed Signature - User Agent Vundo   waldo kitty
• [Emerging-Sigs] Proposed Signature - User Agent Vundo   waldo kitty
• [Emerging-Sigs] Proposed Signature - User Agent Vundo   waldo kitty
• [Emerging-Sigs] What would you like to see?   waldo kitty
• [Emerging-Sigs] 2 Cisco Sigs   waldo kitty
• [Emerging-Sigs] 2 Cisco Sigs   waldo kitty
• [Emerging-Sigs] Proposed Signature - User Agent Vundo   waldo kitty
• [Emerging-Sigs] Clod/Sereki trojan sigs   waldo kitty
• [Emerging-Sigs] question: IDS evasion require_3whs   waldo kitty
• [Emerging-Sigs] Multiple Joomla SQL Injection signatures   waldo kitty
• [Emerging-Sigs] SIG Netgear DG632 Web Management Denial Of Service Attempt   waldo kitty
• [Emerging-Sigs] Proposed Signature; FakeAV Check-in   waldo kitty
• [Emerging-Sigs] counterterrorism sigs   waldo kitty
• [Emerging-Sigs] Proposed Signature; FakeAV Check-in   waldo kitty
• [Emerging-Sigs] Proposed Signature; FakeAV Check-in   waldo kitty
• [Emerging-Sigs] 35mm Slide Gallery imgdir Parameter Directory Traversal   waldo kitty
• [Emerging-Sigs] Emerging-sigs Digest, Vol 25, Issue 115   waldo kitty
• [Emerging-Sigs] jennylab.rules - Shell Thread   mex
• [Emerging-Sigs] alerting on responses (rfi-based)   mex
• [Emerging-Sigs] here's an interesting web exploit attempt, server variables   mex
• [Emerging-Sigs] what has happened to 2002997 / ET WEB PHP Remote File Inclusion (monster list http)   mex
• [Emerging-Sigs] [Fwd: eBay Procedural Warning - Security Alert]   mex
• [Emerging-Sigs] some modifications for sid:2002677 / nikto-detection   mex
• [Emerging-Sigs] MYSQL Sigs (cve,2009-4019 and Brute Force)   mex
• [Emerging-Sigs] What would you like to see?   mex
• [Emerging-Sigs] What would you like to see?   mex
• [Emerging-Sigs] What would you like to see?   mex
• [Emerging-Sigs] some more modifications on scanner-sigs   mex
• [Emerging-Sigs] Hex is or is not human-readable?   mex
• [Emerging-Sigs] question: IDS evasion require_3whs   mex
• [Emerging-Sigs] We have an Official Name and Mascot for the OISF Engine!   mex
• [Emerging-Sigs] counterterrorism sigs   mex
• [Emerging-Sigs] IIS Malformed Local Filename Security Bypass (IIS-0Day)   mex
• [Emerging-Sigs] Sigs: IIS Filename Extension Parsing Security Byspass Attempt   mex
• [Emerging-Sigs] IIS Vuln, SIDs 2010593 & 2010592   mex
• [Emerging-Sigs] Successful Adobe 0-day download   spiffy pickle
• [Emerging-Sigs] StillSecure: 10 New Signatures - Dec - 14 - 2009   signatures
• [Emerging-Sigs] StillSecure: 10 New Signatures - Dec - 24 - 2009   signatures
• [Emerging-Sigs] StillSecure: 10 New Signatures - Dec - 31 - 2009   signatures

Last message date: Thu Dec 31 19:49:41 EDT 2009
Archived on: Fri Jan 1 12:02:27 EDT 2010

• Messages sorted by: [ thread ] [ subject ] [ date ]
• More info on this list...