[Emerging-Sigs] FPs on sid 2028883
jtfas90 at gmail.com
Thu Oct 24 04:07:52 HDT 2019
Yes we are seeing a number of FPs on this one as well. I was going to
send some pcaps over with additional information today of what we are
seeing to support.
On Thu, 2019-10-24 at 12:15 +0000, Erich.Lerch--- via Emerging-sigs
> We're getting several alerts per day from SID 2028883.
> All seem to be legit PNG downloads (HTTP).
> I can consistently reproduce the FP, e.g. with:
> Do others see this behavior too?
> Emerging-sigs mailing list
> Emerging-sigs at lists.emergingthreats.net
> Support Emerging Threats! Subscribe to Emerging Threats Pro
More information about the Emerging-sigs