This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

INDICATOR-OBFUSCATION Javascript indexOf rename attempt

It seems with 9.103 we are now getting heaps for these

INDICATOR-OBFUSCATION Javascript indexOf rename attempt

This seems to be slowing internet browsing down as well? What is this IPS attack and why is it happing?


This thread was automatically locked due to age.
Parents
  • it appears to be a false positive.  Theres another user who ran into this issue.  I'm not a fan of disabling rules but disabling that one seems like a good idea right now.  If you have support get them involved as well.

    Owner:  Emmanuel Technology Consulting

    http://etc-md.com

    Former Sophos SG(Astaro) advocate/researcher/Silver Partner

    PfSense w/Suricata, ntopng, 

    Other addons to follow

Reply
  • it appears to be a false positive.  Theres another user who ran into this issue.  I'm not a fan of disabling rules but disabling that one seems like a good idea right now.  If you have support get them involved as well.

    Owner:  Emmanuel Technology Consulting

    http://etc-md.com

    Former Sophos SG(Astaro) advocate/researcher/Silver Partner

    PfSense w/Suricata, ntopng, 

    Other addons to follow

Children
No Data