srawls1740

The Snort:100 and Snort:101 alerts do not resolve hostnames for the server IP addresses

alert syslog $EXTERNAL_NET any -> $HOME_NET any (msg:"[WINDOWS-MALWARE] TrueCrypter Rakhni or .CryptoHasYou. - Trojan:Win32/Dynamer!ac ransomware extension detected."; pcre: "/ 4663: | 567: | 5145: /"; content:!"\encoding\"; nocase; meta_content: ".%sagan% ",enc,cryptohasyou;...