This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

INDICATOR-OBFUSCATION Javascript indexOf rename attempt

It seems with 9.103 we are now getting heaps for these

INDICATOR-OBFUSCATION Javascript indexOf rename attempt

This seems to be slowing internet browsing down as well? What is this IPS attack and why is it happing?

This thread was automatically locked due to age.

Parents

0 BarryG over 11 years ago

Make sure to use the SID (snort ID) and not the alert ID when disabling rules.

Barry
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 BarryG over 11 years ago

Make sure to use the SID (snort ID) and not the alert ID when disabling rules.

Barry
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 stealthmatt_01 over 11 years ago in reply to BarryG

Make sure to use the SID (snort ID) and not the alert ID when disabling rules.

Barry

How do you disabled this using the SID? do you do this through the web interface or the command line?

Thank you
Cancel
Vote Up 0 Vote Down

Cancel