A New Detection Framework
Cisco Talos's Vulnerability Research Team described NRT, a Near Real Time detection project that uses Snort as a data source to pull files off the wire and pass them to out-of-band detection modules, including a PDF parser, ClamAV, and a logging module. In...