Solved: IDS 5.1(6)E1 Meta Engine Signatures

hendetl · ‎08-23-2007

Is there any documentation that shows ALL signatures associated with a meta signature? Thanks

attmidsteam · ‎08-23-2007

The only definitive method is to look at the components of a signature when tuning it (via VMS for example).

attmidsteam · ‎08-23-2007

The only definitive method is to look at the components of a signature when tuning it (via VMS for example).

hendetl · ‎08-23-2007

That's what I was trying to avoid but was afraid it was the only way. Oh well, thank you very much for the response. Greatly appreciated.

mhellman · ‎08-23-2007

I'm not sure exactly what your after, but maybe this will help?

Nearly all signatures that are components of a meta signature do not have anything set in the action field. In the IDM, you can sort by the action column and you can copy/paste into Excel and massage as needed.

btw, I'm on V6..but as I recall you can do the same or similar with V5.