cuckoosandbox / community

Repository of modules and signatures contributed by the community
324 stars 175 forks source link

Revamping the NetworkICMP signature #518

Closed cccs-kevin closed 2 years ago

cccs-kevin commented 2 years ago

This signature initially did not provide any marks, which are useful for flagging IOCs at the signature-level. This PR will add marks to this signature while also avoiding false positives along the way.