[Oisf-users] sid 2017625

[Travis Green]

Hi Erik, you're always welcome to submit at support at emergingthreats.net or
via the emerging-sigs mailing list (
https://lists.emergingthreats.net/mailman/listinfo/emerging-sigs).

I'll have a look at that sid.

-T

On Mon, Jul 31, 2017 at 7:51 AM, erik clark <philosnef at gmail.com> wrote:

> I was trying to submit a few false positive issues through
> emergingthreats.net, but it wont accept a twikiname that I feel
> comfortable using.
>
> sid 2017625 falsepositives consistently on content:"thawte_seal_generator.exe";
> http_uri
>
> sid 20176017 false positives: Adobe xmp content has <?php xpacket
> end=\r\"?> in the content of the gif. This should be ignored
>
> Ive been chewing through a bunch of these and would like to contribute. If
> someone from the site can explain to me why my twikiname wont work off
> list, that would be great. :)
>
>
> _______________________________________________
> Suricata IDS Users mailing list: oisf-users at openinfosecfoundation.org
> Site: http://suricata-ids.org | Support: http://suricata-ids.org/support/
> List: https://lists.openinfosecfoundation.org/mailman/listinfo/oisf-users
>
> Conference: https://suricon.net
> Trainings: https://suricata-ids.org/training/
>



-- 
PGP: ABE625E6
keybase.io/travisbgreen
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20170731/88c7308a/attachment-0002.html>