[Bro] teamcymru alerts
Seth Hall
seth at icir.org
Thu Jun 12 08:02:00 PDT 2014
On Jun 12, 2014, at 10:38 AM, Allen, Brian <BrianAllen at wustl.edu> wrote:
> I assume this is an alert for an email that went from that 163.com account
> to the french_a at kids account and the malicious file BRO detected was
> attached.
Yep.
> Do I have this right? What about that Mail Delivery (failur... at the end?
The "..." indicates that the content was trimmed.
.Seth
--
Seth Hall
International Computer Science Institute
(Bro) because everyone has a network
http://www.bro.org/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 495 bytes
Desc: Message signed with OpenPGP using GPGMail
Url : http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20140612/37df38c0/attachment.bin
More information about the Bro
mailing list