[Emerging-Sigs] POLICY rule with Trojan classtype.

Jason Taylor jastaylor at emergingthreats.net
Wed Jun 24 02:15:07 HDT 2020


Hi John!

Thanks for bringing this up, will take a look and get it updated for
todays rule push.

JT

On Wed, Jun 24, 2020 at 2:03 AM Attack Detection
<attackdetectionteam at gmail.com> wrote:
>
> Hi.
> Is it possible for you to change the type of a class from a TROJAN to INFO or to another which one? Because there are controversial applications that are not always trojans.
>
> SID:2010645
> –°lass:A Network Trojan was detected
> Message:ET POLICY User-Agent (Launcher)
>
> https://app.any.run/tasks/4345826c-bc69-480c-98fc-26ad0e55f048/
>
> Best regards
> John
> _______________________________________________
> Emerging-sigs mailing list
> Emerging-sigs at lists.emergingthreats.net
> https://lists.emergingthreats.net/mailman/listinfo/emerging-sigs
>
> Support Emerging Threats! Subscribe to Emerging Threats Pro http://www.emergingthreats.net
>


More information about the Emerging-sigs mailing list