0
votes
0answers
96 views

Snort smtp rule detect given text

Very new and just learning some snort rules but looking to get a rule which looks for content of an email which contains the word test just for an example. alert tcp any 25 -> any any (msg:"test ...
1
vote
1answer
452 views

Snort email rule to alert about any email from a specific user

I am new to snort rules and need a rule that will alert any email from a specific user.. For example: alert tcp any any -> any 25 (msg:"Target Email Detected"; content:"email@thatemail.com"; ...