[Emerging-Sigs] SIG for JAR-Download :: Have you checked the Java?

Mex mail at mare-system.de
Sun Oct 24 05:55:19 EDT 2010


maybe, deactivated by default for office-networks?

http://blogs.technet.com/b/mmpc/archive/2010/10/18/have-you-checked-the-java.aspx

alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"JAVA JAR  
Download Attempt"; flow:established,to_server; uricontent:".jar";  
classtype:bad-unknown;   
reference:url,blogs.technet.com/b/mmpc/archive/2010/10/18/have-you-checked-the-java.aspx; sid:xxxxxxxx;  
rev:1;)












More information about the Emerging-sigs mailing list