SID questions
"kyle.hamilton--- via Snort-sigs" <[email protected]> Mon, 24 Nov 2025 20:23:29 +0000
| Newsgroups | gmane.comp.security.ids.snort.sigs |
|---|---|
| Message-ID | <PH1P110MB1742F2D1C48D39340A51B4E4D8D0A@PH1P110MB1742.NAMP110.PROD.OUTLOOK.COM> |
--===============6739504075100679312== Content-Language: en-US Content-Type: multipart/related; boundary="_004_PH1P110MB1742F2D1C48D39340A51B4E4D8D0APH1P110MB1742NAMP_"; type="multipart/alternative" --_004_PH1P110MB1742F2D1C48D39340A51B4E4D8D0APH1P110MB1742NAMP_ Content-Type: multipart/alternative; boundary="_000_PH1P110MB1742F2D1C48D39340A51B4E4D8D0APH1P110MB1742NAMP_" --_000_PH1P110MB1742F2D1C48D39340A51B4E4D8D0APH1P110MB1742NAMP_ Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Good evening, I was conducting an investigation earlier today, and while doing so, I enco= untered a few questions that I was hoping to get clarification on. The SID = that fired off was 1:47649. When I began looking into that SID, I was unabl= e to locate any information on the website pertaining to it. I located Rule= 1:39190, which pertains to the investigation. Is there a difference betwee= n the two SIDs? Is 1:47649 just an updated version of 1:39190? I'm hoping to get clarification to ensure I'm providing accurate informatio= n and that the right alerts are triggering when intended. V/r, Kyle Hamilton Security Analyst / FTI Security Operations / Dept. 2751_8583 Space & Airbone systems / L3HARRIS TECHNOLOGIES, INC. Office +1 877 384 7622 opt.1 L3Harris.com / [email protected]<mailto:[email protected]> 1025 W. NASA Blvd, (Mailstop F-11A) / Melbourne, FL 32919 / USA [cid:[email protected]]<http://www.l3harris.com/> CONFIDENTIALITY NOTICE: This email and any attachments may contain material= that is "Harris Proprietary Information", confidential, privileged, and/or= attorney work product for the sole use of the intended recipient. Any rev= iew, reliance, distribution, disclosure, or forwarding without expressed pe= rmission is strictly prohibited. If you are not the intended recipient, ple= ase contact the sender and delete all copies without reading, printing, or = saving in any manner. /or attorney work product for the sole use of the intended recipient. Any = review, reliance, distribution, disclosure, or forwarding without expressed= permission is strictly prohibited. If you are not the intended recipient, = please contact the sender and delete all copies without reading, printing, = or saving in any manner. = CONFIDENTIALITY NOTICE: This email and any attachments are for the sole use= of the intended recipient and may contain material that is proprietary, co= nfidential, privileged or otherwise legally protected or restricted under a= pplicable government laws. Any review, disclosure, distributing or other us= e without expressed permission of the sender is strictly prohibited. If you= are not the intended recipient, please contact the sender and delete all c= opies without reading, printing, or saving. --_000_PH1P110MB1742F2D1C48D39340A51B4E4D8D0APH1P110MB1742NAMP_ Content-Type: text/html; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable <html xmlns:v=3D"urn:schemas-microsoft-com:vml" xmlns:o=3D"urn:schemas-micr= osoft-com:office:office" xmlns:w=3D"urn:schemas-microsoft-com:office:word" = xmlns:m=3D"http://schemas.microsoft.com/office/2004/12/omml" xmlns=3D"http:= //www.w3.org/TR/REC-html40"> <head> <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dus-ascii"> <meta name=3D"Generator" content=3D"Microsoft Word 15 (filtered medium)"> <!--[if !mso]><style>v\:* {behavior:url(#default#VML);} o\:* {behavior:url(#default#VML);} w\:* {behavior:url(#default#VML);} .shape {behavior:url(#default#VML);} </style><![endif]--><style><!-- /* Font Definitions */ @font-face {font-family:"Cambria Math"; panose-1:2 4 5 3 5 4 6 3 2 4;} @font-face {font-family:Calibri; panose-1:2 15 5 2 2 2 4 3 2 4;} @font-face {font-family:Aptos;} @font-face {font-family:"Segoe UI"; panose-1:2 11 5 2 4 2 4 2 2 3;} /* Style Definitions */ p.MsoNormal, li.MsoNormal, div.MsoNormal {margin:0in; font-size:12.0pt; font-family:"Aptos",serif; mso-ligatures:standardcontextual;} span.EmailStyle17 {mso-style-type:personal-compose; font-family:"Aptos",serif; color:windowtext;} .MsoChpDefault {mso-style-type:export-only;} @page WordSection1 {size:8.5in 11.0in; margin:1.0in 1.0in 1.0in 1.0in;} div.WordSection1 {page:WordSection1;} /* List Definitions */ @list l0 {mso-list-id:414010087; mso-list-type:hybrid; mso-list-template-ids:1932171516 1600002504 67698713 67698715 67698703 676= 98713 67698715 67698703 67698713 67698715;} @list l0:level1 {mso-level-text:"%1\.\)"; mso-level-tab-stop:none; mso-level-number-position:left; text-indent:-.25in;} @list l0:level2 {mso-level-number-format:alpha-lower; mso-level-tab-stop:none; mso-level-number-position:left; text-indent:-.25in;} @list l0:level3 {mso-level-number-format:roman-lower; mso-level-tab-stop:none; mso-level-number-position:right; text-indent:-9.0pt;} @list l0:level4 {mso-level-tab-stop:none; mso-level-number-position:left; text-indent:-.25in;} @list l0:level5 {mso-level-number-format:alpha-lower; mso-level-tab-stop:none; mso-level-number-position:left; text-indent:-.25in;} @list l0:level6 {mso-level-number-format:roman-lower; mso-level-tab-stop:none; mso-level-number-position:right; text-indent:-9.0pt;} @list l0:level7 {mso-level-tab-stop:none; mso-level-number-position:left; text-indent:-.25in;} @list l0:level8 {mso-level-number-format:alpha-lower; mso-level-tab-stop:none; mso-level-number-position:left; text-indent:-.25in;} @list l0:level9 {mso-level-number-format:roman-lower; mso-level-tab-stop:none; mso-level-number-position:right; text-indent:-9.0pt;} ol {margin-bottom:0in;} ul {margin-bottom:0in;} --></style><!--[if gte mso 9]><xml> <o:shapedefaults v:ext=3D"edit" spidmax=3D"1026" /> </xml><![endif]--><!--[if gte mso 9]><xml> <o:shapelayout v:ext=3D"edit"> <o:idmap v:ext=3D"edit" data=3D"1" /> </o:shapelayout></xml><![endif]--> </head> <body lang=3D"EN-US" link=3D"#467886" vlink=3D"#96607D" style=3D"word-wrap:= break-word"> <div class=3D"WordSection1"> <p class=3D"MsoNormal">Good evening, <o:p></o:p></p> <p class=3D"MsoNormal"><o:p> </o:p></p> <p class=3D"MsoNormal">I was conducting an investigation earlier today, and= while doing so, I encountered a few questions that I was hoping to get cla= rification on. The SID that fired off was 1:47649. When I began looking int= o that SID, I was unable to locate any information on the website pertaining to it. I located Rule 1:39190, w= hich pertains to the investigation. Is there a difference between the two S= IDs? Is 1:47649 just an updated version of 1:39190?<o:p></o:p></p> <p class=3D"MsoNormal"><o:p> </o:p></p> <p class=3D"MsoNormal">I’m hoping to get clarification to ensure I= 217;m providing accurate information and that the right alerts are triggeri= ng when intended.<o:p></o:p></p> <p class=3D"MsoNormal"><o:p> </o:p></p> <p class=3D"MsoNormal">V/r,<o:p></o:p></p> <p class=3D"MsoNormal"><o:p> </o:p></p> <p class=3D"MsoNormal"><b>Kyle Hamilton</b><span style=3D"font-size:10.5pt;= font-family:"Segoe UI",sans-serif;mso-ligatures:none"><o:p></o:p>= </span></p> <p class=3D"MsoNormal"><b><span style=3D"font-size:10.0pt">Security Analyst= / FTI Security Operations / Dept. 2751_8583</span></b><b><span style=3D"fo= nt-size:10.0pt"><o:p></o:p></span></b></p> <p class=3D"MsoNormal"><b><span style=3D"font-size:9.0pt;color:#EF6950;text= -transform:uppercase">Space & Airbone systems / L3HARRIS TECHNOLOGIES, = INC.</span></b><span style=3D"font-size:10.5pt;font-family:"Segoe UI&q= uot;,sans-serif"><o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"font-size:9.0pt">Office +1 877 384 76= 22 opt.1</span><span style=3D"font-size:10.5pt;font-family:"Segoe UI&q= uot;,sans-serif"><o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"font-size:9.0pt">L3Harris.com / <u><s= pan style=3D"color:#467886"><a href=3D"mailto:[email protected]"><= span style=3D"color:#467886">[email protected]</span></a></span></= u></span><span style=3D"font-size:9.0pt;font-family:"Calibri",san= s-serif;color:#6888C9"><o:p></o:p></span></p> <p class=3D"MsoNormal"><span style=3D"font-size:9.0pt;color:black">1025 W. = NASA Blvd, (</span><span style=3D"font-size:9.0pt">Mailstop F-11A)<span sty= le=3D"color:black"> / Melbourne, FL 32919 / USA</span></span><span style=3D= "font-size:9.0pt;color:black"><o:p></o:p></span></p> <p class=3D"MsoNormal"><a href=3D"http://www.l3harris.com/"><span style=3D"= font-size:10.0pt;color:black;text-decoration:none"><img border=3D"0" width= =3D"134" height=3D"29" style=3D"width:1.3958in;height:.302in" id=3D"Picture= _x0020_888511011" src=3D"cid:[email protected]"></span></a><sp= an style=3D"font-size:10.0pt;color:black"><br> </span><i><span style=3D"font-size:7.5pt;color:red">CONFIDENTIALITY NOTICE:= This email and any attachments may contain material that is "Harris P= roprietary Information", confidential, privileged, and/or attorney wor= k product for the sole use of the intended recipient. Any review, reliance, distribution, disclosure, or forwarding without expr= essed permission is strictly prohibited. If you are not the intended recipi= ent, please contact the sender and delete all copies without reading, print= ing, or saving in any manner.</span></i><span style=3D"font-size:11.0pt;col= or:red"><o:p></o:p></span></p> <p class=3D"MsoNormal" style=3D"margin-bottom:12.0pt;text-autospace:none"><= i><span style=3D"font-size:7.5pt;color:red">/or attorney work product for t= he sole use of the intended recipient. Any review, reliance, distribu= tion, disclosure, or forwarding without expressed permission is strictly prohibited. If you are not the intended recipient, = please contact the sender and delete all copies without reading, printing, = or saving in any manner.<o:p></o:p></span></i></p> <p class=3D"MsoNormal"><o:p> </o:p></p> </div> <span><span><br> </span> </span><br> <DIV><span style=3D"FONT-FAMILY: Times New Roman"><span style=3D"FONT-SIZE:= 14px">CONFIDENTIALITY NOTICE: This email and any attachments are for the s= ole use of the intended recipient and may contain material that is propriet= ary, confidential, privileged or otherwise legally protected or restricted = under applicable government laws. Any review, disclosure, distributing or o= ther use without expressed permission of the sender is strictly prohibited.= If you are not the intended recipient, please contact the sender and delet= e all copies without reading, printing, or saving.</span></span> <DIV style=3D'FONT-SIZE: 14px; FONT-FAMILY: "Times New Roman"'><br></DIV></= DIV></body> </html> --_000_PH1P110MB1742F2D1C48D39340A51B4E4D8D0APH1P110MB1742NAMP_-- --_004_PH1P110MB1742F2D1C48D39340A51B4E4D8D0APH1P110MB1742NAMP_ Content-Type: image/png; name="image001.png" Content-Description: image001.png Content-Disposition: inline; filename="image001.png"; size=4957; creation-date="Mon, 24 Nov 2025 20:23:29 GMT"; modification-date="Mon, 24 Nov 2025 20:23:29 GMT" Content-ID: <[email protected]> Content-Transfer-Encoding: base64 iVBORw0KGgoAAAANSUhEUgAAAIYAAAAdCAYAAABv2BQRAAAAAXNSR0IArs4c6QAAAAlwSFlzAAAO xAAADsQBlSsOGwAAABl0RVh0U29mdHdhcmUATWljcm9zb2Z0IE9mZmljZX/tNXEAABLdSURBVGhD 7ZsJdFTl2cffe+fOFjJhUYGigPLJYkWiuCAoWg6fIlVHIIYIqaZqsX5HQOqnQESZbxIgINriRt1Q UCOmGBLSUgU3LCpa9bBYxTXiRhWtCGFJZu7c+/2em5npzGTC2Nb2HI68nMvMvPv7PP9nfW+McDis DlRmh0I+pfJ+rZT2P6397M/5bxdPgEeLj9Vspfz8mFkRnnH/ASc81HhQUMA4MCiqRgKKRfD/eEvF 7tWV1tlW2kBNWZUV4fLHE2MBj64p/7NK6Qtmh+b/FPBcRftXBwUFDm0yKwXaBcbsUNU8W+kTAUEF wLhKV+ZtFeGb36f+CgBQfnNofpGmorOoe68iHLZuCi1o1JW9gbY8W1mvzw7NBRyz1hyi+8FJgTbA mB6q6uVT2qOAIS+mIufRIaqUe4pS5hdyRDTBg2iI39nKP0cpz4uzQwt+g/mo0pX1ItpkdGV4xvib QlWva8q1BO3xaEV45syDkzQ/7F2nAeOm0NzRMPROS2nP6Wrf5HnhcARN8HNdqW1ohaYEqfi+h+/T 0B7LAcNtgGOEpVQDPsZh0mdOuPxR2p5Gezxyc2jBWrTOJAD18Q+b1AfX6ZPAgLmjlTL+qJR1SWV4 Zk3iGIDiJ/gM72Q7Fsx+lfozAc9cXelVfG9CW1zM966A4jRb2T5N6cMBzwsAZQj9vzy4yPPD3W2K xrAnYD7+xjMWU/E0WuGbVrLYvXlWp5KIdsbl97OUORIQDCQi6UX7bp4eunKtAFzVzPO2prTnlYpN BRxLmAPgqaU/XFIfXCd3gDE7tKgAqR6s4VPgN0zBf3j1xlDV5fPC5fgNyhNT5qbWflVnY2Yuon04 zJfw9BMY/hcA8Bt+b0ZL1PG7A13zlNq3CHDti49bDlByAmNZTc2RPq/3Gl3XVSQa3VRaVPS79shZ U1PTxfR6r3TZ9qmWbQc0XX/L0vXflwaDL6SOqa6tHWS43Zeg+ZQVja4oKSramNZeXz/VYxjdI6b5 SemYMfe0t97y2tpferze3vR7b8KYMVkBvmzZsnxPx45TWCvAntKn0jCoSr3KGqsy11heX19m6Hp/ MxZLa9JdLhmz7cudO6unlZXtzTjXSI/bTdSI92dZa9nTuoz2IdAxqDRtgG1Znfj+ETv6INLSsrys pCRp1qtragqV19tD6fpfAcPOkmDwY2g2wAGGpVrOJqJoJsJ4nZ9lAGCKS+n3YV7WM1kXXbmvwJE8 E8YX0P6SpsxKpSIvwHjJZyQL/fltLaJfIdgggqk8nzkFVM8BmMvQNIFUXyWTQD6/vycHKHcBDM2y fk97VmDIxnWPpx6G9tcguBTbts+LmeavqlesuLa0uPiulLlPchlGuU4/CPgR9WnAcFnW9YZh9IxF o2/TlhUYNQ0NR0O43/JoLLT7npqaVVeXlOzM3P9+ny/gse0Qe/PqFiLEOWCMbE72pywY/9jKlfX5 TU2XB8vKvk2Mp20SezzDpq8IReoYjXHdCwqm1NTWXgKo30qMYdbzGHO99I3t3y+ISgID+vyv4XJV 6YbhTtDHoRF70n2+GctXrJg+objYyTexXmdAfKmKRpfENO0ugHKN5navdIABKEYJmhOL4gvcSbj5 GdHISrQB/2wiC4vwc2au5NWnzHYMUcoswNVkK/c6NM8o8UUAlqmU7+TUA2QSlg6myzSVLcSBAZnt 8ru6utqj+f1LkN7+0UhECC4E2c4TdLlc+bZh3F7b0PBsUTC4NT6+BcAoqxVAzZlzwoydpmn2RACS jMrsg6a5wOV2a0ibELIgYBgiqU9k9vOLjCn1N8s0e1iWtZ/NbYFxMebOZ/VBwnS3xzNmTyCAplXX pozfxR5UjAIN3qTvPtHUgGIAWiMfAAw0o9GHOfvQ0tLSiMNkpfbKGAEGNHA0s0Of2toz6X+r1DNG 6IhQqm85Zy8E7hTGdWJUUqCtSORlDjXQ3LPnFSMQ0DTDWMDYrxM+xqnI6E0yMQw9nA9yF8ZZzPok Ex0F3t8CHpNwMo8iLH0ARgOArEXqj5IW+syn/1cupa29MbRwKBQjp+G6kKZ17Yz9TtUQQzcAgxmJ HIsEbJ4wbty5cYKUIaEPQRQ9EomMpS4BjO80b3udQiTvjissLEm0OxKoafhjbYGR7CPARju9s3nz MDLLFibG58nPPwtaLodBXZijGK3zf6laJy7ZezlT0cSiokbWNfoNGtSX35JIHARABqsOHc7he5q/ l7lvaHARAqIQBguAXo32dIQ5tGGDMWD79mJAsffS4uKGxDjo6UW72Mrn68RaL3K259n9WQZAOJpE lkdT+57heym+RoijbzZVZJyhjB+hAabPCc+cgOT/BBRdA1WehuHrAchdMB+/IrVYQFR3JWrmhGcs oa+bbf4hpuxHXcoejDnRMCcZBvi7866srEykfhb+yJ2YAHyZ1gLin9ECgRakwsfkx2SbEYn9h9eF OQNh5hloAJkS2lkahBvF+r1TbXWW9WwBhdTH97z2sdraV1DvP0XCu3U2jD40vZE5DkZBQ6UYCw/V VjTAr5XLtVSAg3R3y0UpeFfomC3bbjK7d38k0T88dKjMh6+XXhobG/f26dNnWePJJ+/v09g4rywY 3AWQXxKNgSOpPreUfxGTjkMxTYPhtTIcn2EItHCIjyO6jo91s0MLjwcU3Ju4VtwUmv8aUci8ivAN CdsnhE/cnzg7ABz3AA5By0IaiHp8R1KNmfrXCkxxEm6JYuTnX4akkJvjBEq9nG12mCrEySwHBott F6GFNCTQtGOxKszcdADZQbft85locXungDkOKBJFNM+AwkIETSiktSjDyGYq8ev9afXQ7MSUadK9 02yHse0PqT4Hn6rA8+WXIQB8N7Rql95x8EpeSqmBAx0TA5CbDNyREUjACH63QNKTAMXXqfTOXDsO gsloF8yKhp2MNQCgtZhFvufJodKAIeMBx2L6Y4L1W/kpQGyD3PYInKt+WUNDJ08stgLm/Td9bexq fcDtTuZhEuPF8cPeVj5WVzc1dU42K+o66zIw09W/sHBcXM2/uzsWW1SAp4+6LnRp2sUMygoMkVjG HIa0X56YmHnGM+4kmYs1X3v7jTc+VMFg5roew7KuYpzDA5g7GBPyS/kOMPcQXaVFXNk2DXDXsP7V sgHd7Z7pdrmu4MyfcvZv0abPNre0rAAoH+SiqwEoyhCZP5DUKsoGwPYmAECCwhuIPB7AyZyrqTyi CJuLM21ba57DOJqnK8AbRL+eHNPJitJ+0fcJDOby8oyU0A6JNpVprgmOHZt0xhL7F2ahUY6FOcem nkkc0/ZUBmZkKObnx/GoYjU+wTdEFU8xvhCmDa9uaPgx4bFEM2klDoweXp/vQfnuPHHwsd7HRCzT EmYmdX989xNp3YIDKKbAGeesbVlRtN3kCWPHbsvFUMLhevZ4C/u+XnO5dLdOslHTujp7gk5er3cq wBtDKiAZbGSbEwZa78E0bP987keiYbkoS+mY0ybT/90podCVnZX/YeYp5SSb8GROIfACDPZOtFCU 513mZB3XeoCRqpFynTN3e+fOu9SOHTeg6a9FInoSat1BaLeV0O5PqYNFUmHKmxzoc8Dxd61mWcMg orxC0KYwphQw6QQLETTSA9IBAi9lnuv47bajUXFKQ9nG0i9K1LSN9ToCoq6yPgze1LJ79/moaomi shULjfcpY2JssE9cU30Ta2m5uLSk5PncxGjtMXHcuBnQoC6m60PYxQjm6Q44/ovPwxGg7gjQ3UQ4 ZxDhtLQ3J8DQa3FrevCJzfasxR94jHuSChxEBhFyKXnVom3BGR1iKP0c8DyCK3fGKyTHwrbrwyAf 2mPfacyRlpThRvYiFKnkJ763UjZ8uDijtxF/P2l5vRvchlEQsaxJ1KUBQzQKhJo7MRhMMzOP19Vt BCgnEium7QkHLOAOBC6MO3I7yHOcgKQdRycfDP7Gdrm6YYCK8PYr445dcryEpSSrPtzR1HTKEfn5 XVHvr7BGVwh5JN6/5NqygVBQtxdNMdp0uz/zmmYdjupINEUnPrv8owRDMF5hjDy3y1j2fgw0WMV5 TsCZHmz6fL2pRlizF4MI/ylDaVXkHkhiVUne4g58hdF8n8yQbQDD8ZKlYDYGWsqQuxDsuZ7PSbYi B2ga48/ie+BrXEUdDqZ+BPRDe6j7/j62ajCEwZzsz2kn42MOqK1IOp2OdO1CJTphKRL1Nof/ijxG AdIhibg2BY64MytZJCujjI4dR+JHHIm2EFt/FPbdccilSIQiPgsa6vh+27cPpQpNmF6Qzlg8W/nR 8rq6JfwuR8sc4bYs0TAC3LZF08RH2l1WVNREEmoOmdyRAEonBzMPoK6ORzdZh+aqhE4fVa9c+Qwa 8AT2ovlsW0xwuwVr1ky2M68TQDgBv0Eyn8O4CON+Q3sYdUb+wolORkFAnEt3P6j4GlU4kd7nKsLT Mjxrm/sTewN9arBom9Eq78WjGTI/Oj6M/WZlONwmydTO7hyGiTefaHdyAjU13UkFP4AUjYZokmRy cgyAYjiHdrx+Sf5km1NCzVwETLTjB1wstt6ZjwhDAEKR8YnIS4PRKmZZ46lrA4x4X2c8iZV7YrY9 mT0HkNqfoeYXpWYxU/dE9tcBL5nJdYS360mVDycK6hfLyyuj+t5c++eq4EeWx3MfZ11GCL8WMDk8 wnT01/PyznV8FqSz2TSTSa5scxqo+2b8i7+w/XF0eFM6cW1+B0CpJb+xBYCgxuzjMTe30HQl4Plr e5uT/AFc/Jg+jQIuNNHDOKInyoUcmuVstpSaqm73jCKRcOBcJO0lQjwEFlEiu4eWmKiam5uU230a gqTDrfHVdXWd6bsDkIyiW544eYxvk5XMRdDUdiKdbuSSJRwVVLxPaHpZHBBODeu7WFsST73YXJD+ s4j/s2ZqZUBJSckn1U88cT8a6DocQh+pJ3lH5dJce+JcC6HpcGEmoJ++qKHhkWnBYBvHOjEPQtPN 4/G8QHa1L5rnAr2g4P3lK1d+yBxussWnStbWSdOb5uNEJpJ9bbfE70rs1WxC3ukMS09AUYhw3AgN JCYmpWuTANNh+Ix2QSHjABESqzkLAq6H8CnGaMo3dzpij8N9GFt6JsdmDKTK8cbFUeIQhwtRHJtN epcDdkECvkDigjib9aj3bvSTbKBTJMKg3+IPtmypU0XJIMsrki13JUg976+mFxBHrgnJj0Y7JVr0 aPQyr9/v/GbO2ri9ThvIpdoa5p2EBuilIhERqqU4ZLoHcxmfL90v0LS7WWOa2+vV2ffP0HD3od4T mqajMyYWK2D/yQThO1u2/BHB2Oj2+U5iTJ8j9u2bwTqOswu/OsgYyduQsm9N9Pn9zTB9LXP0Ym9i KvpCn77SlLiriUajq6JNTWj/A5f4XYlaA9G53wgRSfjGcj4ByO1kQ69ktWqkHfOhzcExPY+cRPyl 4KwTM42VjDoY9wvY+rxH+ZlLbcrIkbSZoHn//k+5Xa3KvJkUplIXibhcO2SQMArpOJ2vInWDODXp BX0rafJ1pIDrU0Ah3TfC3CrR/4QXYirTCg7prYCsOxdISQkiRfwZ6eQqx5ew7WXZTmq53YthwNdO hBOLOWrZL9rM6w0DgAD+gbPXRAEEjVzw/QLmC7NcOK4dE238vp+5/sQeWwzTjL/u4GQ/Y2jJa9j/ hdBPgw7J92jp+xT1jv+Hc8v7tuQdyFryMZkw+n4ij7GAvidn6M38zYx9By33Mun2lblAIe0OMOTF XczJZnwN7jNstIJ1TtzfUEh9R7TFFup+i0YgmTV/fbPaX3RLOJx28NmhahBqs39zZ2JhmReTspDs 6FJkb2KuDaHe5A10NFXuQt9t9OKW98AFhrB3JU/WQtyPs51euMKWBNwBk3DkLzbRR55kQZtJBlFe WMq+VnHxQ9kaWC8r+KQv1+C8R6vkSSucS8DgAKJNWzAIL5U8/3RJXKLhHGrLUPW8wWXPT4BCZhUH lLoR1AGKEBdreQ96lf/1G0OV584L35zyZtf2vhiAgKaMpMY4DsdRV/6Tydx/wTzr/uldHhr4H6dA EhiYiCeJPi4ACovQCoNxXH/VetmlSYYM8yKaJSyuubyvMdul3C/zOQbAxPMFEXIZLhywZgcYrZdz kvTi+ljZww7ktP7HT31owZwUSAKjlfEzVsNQ8gJ6ta3yhPHjcefeMJT7WrRFh0TCCiZXYCLQAlod YLqCcauwSrzeZ2+XPyWgLohvsRhA1AOwKf/KbWrOExzq8G+hQBowWsFR3ggIhiHtZMw0rteNcqp5 OcTozqdEKU4h6pA3vOTl3qV8Xo4z1RtT9AWAob9+HeZjamW4/Hu7LPu3nP7QpO1SoA0w4iZDnPip aAxe43NuRHkPwDgtFRhxDbOKPsX4FveiPUjMaB15G2wj73Kcjv+RBNEh+h98FMgKjMQx0B41MP5F GM71siYaQpJcGUXbCyjQJloef8Y4E02y4OAjw6EdZ1Lg/wE3PjwdnkQm0gAAAABJRU5ErkJggg== --_004_PH1P110MB1742F2D1C48D39340A51B4E4D8D0APH1P110MB1742NAMP_-- --===============6739504075100679312== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Snort-sigs mailing list [email protected] https://lists.snort.org/mailman/listinfo/snort-sigs Please visit http://blog.snort.org for the latest news about Snort! Please follow these rules: https://snort.org/faq/what-is-the-mailing-list-etiquette Visit the Snort.org to subscribe to the official Snort ruleset, make sure to stay up to date to catch the most <a href=" https://snort.org/downloads/#rule-downloads">emerging threats</a>! --===============6739504075100679312==--