I would like to make a simple custom signature that will count all of the syn requests from the internet towards an internal class C network on a particular destination port.
Which engine should we use and how should the signature be configured?
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: