I want to configure my sensor such that it sends a reset packet if it detect a file "VirtualR3D.exe".
I created a custome signature with STRING.TCP, but it does not work.
Service Port: 139,445
Regex String : [V][i][r][t][u][a][l][R][a][p][D][.][e][x][e]
Also, I clone a signature with this parameters.
SMB Command: 162
Please can you help me.
Tks in advaced.