[Emerging-Sigs] DCSYNC rule
kevross33 at googlemail.com
Fri Feb 28 05:48:46 HST 2020
Try taking a look at these for lateral stuff and modifying
https://github.com/MrAnde7son/Snort/blob/master/local rules. Zeeks bzar
mitre plugin might work too for lateral movement stuff.
On Fri, 28 Feb 2020, 15:36 James Lay, <jlay at slave-tothe-box.net> wrote:
> Anyone know if this was updated?
> IN a recent engagement I did not see this hit. Thank you!
> Emerging-sigs mailing list
> Emerging-sigs at lists.emergingthreats.net
> Support Emerging Threats! Subscribe to Emerging Threats Pro
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Emerging-sigs