CONTENT-REPLACE -- These Snort rules specifically involve the content replace function. Content replace could be used in several different scenarios, but is rare.
CONTENT-REPLACE IRC deny out-bound file transfer attempts
This event is generated when network traffic that indicates IRC is being used. Impact: Possible policy violation. The use of IRC may be prohibited by corporate policy in some network environments. This event indicates that the content of a transaction using IRC has been replaced. Details: This event indicates that the IRC is being used on the protected network. Ease of Attack: Simple.
No information provided
No public information
No known false positives
Cisco Talos
No rule groups
None
No information provided
None
©2024 Cisco and/or its affiliates. Snort, the Snort and Pig logo are registered trademarks of Cisco. All rights reserved.
