[Emerging-Sigs] 2018383 FPs

Korodev korodev at gmail.com
Thu Jan 9 06:27:05 HST 2020


Can't share any pcaps at the moment but the majority of them are
outbound to Microsoft IPs associated with Office 365.

\\korodev

On Thu, Jan 9, 2020 at 9:42 AM <wkitty42 at windstream.net> wrote:
>
> On 1/9/20 9:06 AM, Korodev wrote:
> > Anyone else seeing lots of FPs on this Heartbleed sig?
>
>
> i just searched our alerts over the last 6-8 months and don't see any for
> sid:2018383... maybe we're lucky?
>
> what traffic are you seeing the alert on? do you have any pcaps showing what
> you're seeing?
>
>
>
> --
>   NOTE: No off-list assistance is given without prior approval.
>         *Please keep mailing list traffic on the list where it belongs!*
> _______________________________________________
> Emerging-sigs mailing list
> Emerging-sigs at lists.emergingthreats.net
> https://lists.emergingthreats.net/mailman/listinfo/emerging-sigs
>
> Support Emerging Threats! Subscribe to Emerging Threats Pro http://www.emergingthreats.net
>


More information about the Emerging-sigs mailing list