WelcomeEnterpriseSmall BusinessHome & Home OfficePartnersAbout Symantec
30 March, 2000
NetProwler 3.0 Security Update 10

Important: This security update is considered obsolete. It has been superceded by Security Update 12.

Download obsolete signatures

Description

NetProwler 3.0 Security Update 10 introduces detection signatures for Whisker-style detection avoidance.

This update supercedes updates 6, 7, 8, and 9.

Updated/New Signatures

  • HTTP_session_splicing_detected
  • Whisker_style_IDS_evasion_detected

Other Included Signatures

  • Stacheldraht_activity_detected
  • Stacheldraht_agent_detected
  • Stacheldraht_handler_detected
  • TFN_activity_detected
  • TFN_daemon_detected_via_command
  • TFN_master_detected_via_command
  • TFN_shell_created
  • TFN2K_activity_detected
  • Trinoo_client_activity_detected
  • Trinoo_daemon_detected_via_HELLO
  • Trinoo_daemon_detected_via_png
  • Trinoo_daemon_detected_via_shi
  • Trinoo_daemon_suspected_due_to_incoming_command
  • Trinoo_master_detected_via_client_activity
  • Trinoo_master_detected_via_command
  • Trinoo_master_detected_via_png
  • Trinoo_master_detected_via_shi
  • Trinoo_master_suspected_due_to_incoming_HELLO

Additional Resources


Last modified on: Thursday, 27-Sep-01 18:01:07