[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [ISSForum] Signature tuning



Marc,

Knowledgebase article 2190 contains a ".CHM" file that contains a wealth
of information about signatures including tuning. Which signature(s)
specifically is a problem in your environment?

Paul

-----Original Message-----
From: issforum-bounces@xxxxxxxxxxxxxxxx On Behalf Of Soda, Marc
Sent: Monday, December 20, 2004 1:24 PM
To: issforum@xxxxxxxxxxxxxxxx
Subject: [ISSForum] Signature tuning


Hello all,

Is anyone aware of documentation or resources for tuning specific IDS
signatures?  I'm trying to eliminate a high number of false positives.

Thanks,
-- 
Marc Soda, CISSP
Information Security Engineer
NCO Group
215.441.2189


_______________________________________________
ISSForum mailing list
ISSForum@xxxxxxx

TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to
https://atla-mm1.iss.net/mailman/listinfo/issforum

To contact the ISSForum Moderator, send email to mod-issforum@xxxxxxx

The ISSForum mailing list is hosted and managed by Internet Security
Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.

_______________________________________________
ISSForum mailing list
ISSForum@xxxxxxx

TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum

To contact the ISSForum Moderator, send email to mod-issforum@xxxxxxx

The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.