[Emerging-Sigs] 2018383 FPs
korodev at gmail.com
Thu Jan 9 06:27:05 HST 2020
Can't share any pcaps at the moment but the majority of them are
outbound to Microsoft IPs associated with Office 365.
On Thu, Jan 9, 2020 at 9:42 AM <wkitty42 at windstream.net> wrote:
> On 1/9/20 9:06 AM, Korodev wrote:
> > Anyone else seeing lots of FPs on this Heartbleed sig?
> i just searched our alerts over the last 6-8 months and don't see any for
> sid:2018383... maybe we're lucky?
> what traffic are you seeing the alert on? do you have any pcaps showing what
> you're seeing?
> NOTE: No off-list assistance is given without prior approval.
> *Please keep mailing list traffic on the list where it belongs!*
> Emerging-sigs mailing list
> Emerging-sigs at lists.emergingthreats.net
> Support Emerging Threats! Subscribe to Emerging Threats Pro http://www.emergingthreats.net
More information about the Emerging-sigs