[sanesecurity] Re: winnow additions
- From: Grayhat <grayhat@xxxxxxx>
- To: sanesecurity@xxxxxxxxxxxxx
- Date: Tue, 14 Feb 2012 10:12:38 +0100
> Just to let you know. winnow will be adding skull's bofhland
> signatures to the winnow distribution.
Cool !! So at end Emanuele did it :) !
> bofhland_cracked_URL.ndb, bofhland_malware_URL.ndb and
> bofhland_phishing_URL.ndb will be added to winnow_malware_links.ndb
> and winnow_phish_complete.ndb and winnow_phish_complete_url.ndb.
A question; are the complete sigs fully added to the winnow DBs or are
you performing some kind of "filtering" on them ? Just curious; as a
note I've been testing those sigs (and I think Steve did the same) for
a while by directly fetching them from the bofhland page :D
Other related posts:
