Marc, Knowledgebase article 2190 contains a ".CHM" file that contains a wealth of information about signatures including tuning. Which signature(s) specifically is a problem in your environment?
Paul -----Original Message----- From: [EMAIL PROTECTED] On Behalf Of Soda, Marc Sent: Monday, December 20, 2004 1:24 PM To: [EMAIL PROTECTED] Subject: [ISSForum] Signature tuning Hello all, Is anyone aware of documentation or resources for tuning specific IDS signatures? I'm trying to eliminate a high number of false positives. Thanks, -- Marc Soda, CISSP Information Security Engineer NCO Group 215.441.2189 _______________________________________________ ISSForum mailing list [email protected] TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum To contact the ISSForum Moderator, send email to [EMAIL PROTECTED] The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328. _______________________________________________ ISSForum mailing list [email protected] TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum To contact the ISSForum Moderator, send email to [EMAIL PROTECTED] The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.
