4 Replies Latest reply on Oct 17, 2014 7:52 AM by pboetzel

    How to create Custom Signature using Fingerprint

    FLJKBH

      Howdy all

       

      I'd like to create a custom signature to prevent create, execute, read, rename, and write a list of MD5 hashes. I haven't been able to find documentation on this process. My thought process is:

       

      1. Create Stand IPS Subrule

      2. Rule Type = File

      3. Create "executables" for each MD5 / fingerprint

       

      What should be included in the parameter section? I want the entire system to be protected from these MD5 hashes.

       

      Is my thought process correct? Any and all feedback is appreciatred!

       

      Thank you

       

      image001.png

       

      Message was edited by: FLJKBH on 2/25/14 4:03:07 PM CST