cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

1789
Views
0
Helpful
0
Replies

Snort Signature Database

Hi

 

Does anyone knows where to get information about a Firepower IPS?, Ive been getting a lot of signatures from my IDS like 

 

BLACKLIST DNS request for known malware domain did.ijinshan.com - Win.Trojan.Jadtre (1:33881:1)

BLACKLIST User-Agent known malicious user-agent - Microsoft Internet Explorer - Win.Trojan.Backspace (1:35569:1)

OS-OTHER Bash CGI environment variable injection attempt (1:31978:4)

and similar

 

The issue is that I cannot find any centralized db for the signatures, I only found in other databases like sophos and the like.

 

Is there any webpage or centralized database where I can found the complete description of the signature database from SNort-Sourcefire?

 

Thanks. Your help is much appreciated.