Hi
Does anyone knows where to get information about a Firepower IPS?, Ive been getting a lot of signatures from my IDS like
BLACKLIST DNS request for known malware domain did.ijinshan.com - Win.Trojan.Jadtre (1:33881:1)
BLACKLIST User-Agent known malicious user-agent - Microsoft Internet Explorer - Win.Trojan.Backspace (1:35569:1)
OS-OTHER Bash CGI environment variable injection attempt (1:31978:4)
and similar
The issue is that I cannot find any centralized db for the signatures, I only found in other databases like sophos and the like.
Is there any webpage or centralized database where I can found the complete description of the signature database from SNort-Sourcefire?
Thanks. Your help is much appreciated.