[Emerging-Sigs] conficker domain rules

Jack Pepper pepperjack at afferentsecurity.com
Tue Jan 20 09:14:24 EST 2009


Quoting Matt Jonkman <jonkman at jonkmans.com>:

> Great rules Jack. Surely useful, but I'd rather keep them out of the
> ruleset for the time being. They'll come and go quickly. :)

they are definitely a moving target.

jp

-- 

Framework?  I don't need no stinking framework!

----------------------------------------------------------------
@fferent Security Labs:  Isolate/Insulate/Innovate  
http://www.afferentsecurity.com



More information about the Emerging-sigs mailing list