Detecting abnormal behaviour

From: Adrian S (hotelectronat_private)
Date: Fri Mar 21 2003 - 08:28:52 PST

Previous message: Ryan Yagatich: "Re: NSLOOKUP.EXE"
Next in thread: Alexander E. Cuttergo: "Re: Detecting abnormal behaviour"
Reply: Alexander E. Cuttergo: "Re: Detecting abnormal behaviour"
Reply: Stephen.: "Re: Detecting abnormal behaviour"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

('binary' encoding is not supported, stored as-is) Hi, Is it possible to determine the source address of the system call to check if it is proper from a list of legal addresses (legal process space etc) ? rgds Adrian

Next message: Geo.: "Backup Agents"
Previous message: Ryan Yagatich: "Re: NSLOOKUP.EXE"
Next in thread: Alexander E. Cuttergo: "Re: Detecting abnormal behaviour"
Reply: Alexander E. Cuttergo: "Re: Detecting abnormal behaviour"
Reply: Stephen.: "Re: Detecting abnormal behaviour"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Fri Mar 21 2003 - 10:52:50 PST