alert syslog $EXTERNAL_NET any -> $HOME_NET any (msg: "[OSSEC] Level 10 - Courier brute force (multiple failed logins). (courier_rules.xml:syslog,courier)"; content: "Rule: 3910 "; classtype: exploit-attempt; program: ossec; sid: 6003910; rev:1;)

-- Main.Sagan-Wiki-Add - 2011-7-6

New revisions of 6003910 will be below...

Topic revision: r1 - 2011-07-06 - Sagan-Wiki-Add
This site is powered by the TWiki collaboration platform Powered by PerlCopyright © 2008-2015 by the contributing authors. All material on this collaboration platform is the property of the contributing authors.
Ideas, requests, problems regarding TWiki? Send feedback