I would like to create custom signature that name "Baidu PC Faster" and select type is "detect a string in ad application running over a custom port".But i don't know that "custom port and string to match" what is it? btw,I want to give it detect name "Baidu PC Faster" on alert real time threat.
Is there anyone have any idea?
Thanks in advance
You need to declare more specific what you are trying to do?
What type of application are you trying to detect?
Custom port: is what port your application is running for communication
String to Match: is what value to look for.