1473
Views
0
Helpful
2
Replies
Data Exfiltration
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-20-2012 01:03 PM - edited 03-10-2019 05:42 AM
How can i detect low and slow data exfiltration with the Cisco IPS?
Labels:
- Labels:
-
IPS and IDS
2 Replies 2
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-26-2012 11:12 AM
This is a valid question. Let's get some discussion going here.
Bob, you wouldn't happen to be talking about 3.H.1. would you?
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-26-2012 11:36 AM
Yes I am talking about 3.H.1 also looking at 3.H.1.B I was going to create a custom Signatures that looks for ZIP and RAR files for the compressed files.
