Threat Level: green Handler on Duty: Kevin Liston

SANS ISC: Followup to "What's going on..." - SANS Internet Storm Center SANS ISC InfoSec Forums


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Followup to "What's going on..."

During my last shift I posted a story where I noted increased traffic on ports 8800, 1100, and 5905 and asking if anyone had packets.  We didn't get any captures, but a week or so later, our friends over at MWcollect posted this story which I found very interesting/useful, so I wanted to point it out to the rest of you who may not follow their blog.  I haven't played much with libemu, but after reading this, I clearly need to spend some more time with it.

Jim

400 Posts
ISC Handler

Sign Up for Free or Log In to start participating in the conversation!