Snort 2.8.4 is nigh
Summary: Cisco Talos announced that Snort 2.8.4 will be released this week, and that it will be the only version receiving new detection rules for anything DCERPC-related. The new dcerpc2 preprocessor moves detection and decoding out of the rules themselves, which the post says will greatly reduce the number of rules needed in the NetBIOS category and simplify rule management.
What you should know: Once 2.8.4 ships, any Snort deployment left on an earlier version stops getting DCERPC detection entirely, because no backwards-compatible rules will be released.
Read the original at Cisco Talos ↗
- Topics
- Malware
- Related
- ARTEX and beyond: AI-enabled penetration testing platforms Cyber Risks · Nov 13, 2026Fake GTA 6 download goes after Steam logins and crypto wallet data Cyber Risks · Nov 13, 2026Operation Endgame Takes Down Gootloader, CastleRAT and StealC Servers, Seizes 6.4M Stolen Logins Cyber Risks · Nov 13, 2026