Hi everyone,
I�m currently testing Server Sensor 7.0 xpu 22.4
Server sensor machine has a vulnerable sql installed.
The purpose of the test is to ensure it can detect sql events, i want the sensor to detect SQL server sapphire-slammer worm, can anyone tell me if there�s a specific signature for this worm and what tool can i use to test it???
I would not like to spread the real worm in my environment.. i used Retina- Sapphire SQL Scanner and retina scanner (both report the vulnerability) and a fully checked sensor policy, and it doesn�t report anything to siteprotector..
kind regards
Luis Javier
