[Emerging-Sigs] conficker domain rules

Jack Pepper pepperjack at afferentsecurity.com
Tue Jan 20 09:14:24 EST 2009

Quoting Matt Jonkman <jonkman at jonkmans.com>:

> Great rules Jack. Surely useful, but I'd rather keep them out of the
> ruleset for the time being. They'll come and go quickly. :)

they are definitely a moving target.



Framework?  I don't need no stinking framework!

@fferent Security Labs:  Isolate/Insulate/Innovate  

More information about the Emerging-sigs mailing list