2 Replies Latest reply on Apr 7, 2017 8:25 AM by ciaranr

    need more detail about http-error-code in attack signature

    nwcorp

      Hello Everyone

              regarding to this signature  from HTTP: Possible Malicious PDF File Detected

       

      Signature#2

      condition 1

      http-rsp-INTERNAL-PDF-PDF-message-body matches "/JavaScript" ( case-sensitive )

      [AND] http-error-code == Adobe-JBIG2-stream-page_association ( unsigned )

       

           

              what does "http-error-code == Adobe-JBIG2-stream-page_association ( unsigned )" means ? 

       

      Thank you very much

      NW