Created on 06-20-2008 08:17 AM
To add a custom IPS signature, go to IPS>Signature>Custom and select Create New.
F-SBID( --name "MS.SQL.Server.SA.Login"; --protocol tcp; --dst_port 1433; --flow from_client,established;--content "|10|"; --depth 1; --content "|02 00|"; --offset 50; --depth 2;--content "s|00|a|00|"; --offset 94; --no_case; )
