From a conversation in Slack today, If you have feedback on an IOC found in one of the SANS feeds, such as reporting a false-positive, the best place to provide that (currently) is by opening a bug at https://github.com/jullrich/ISC-Bugs/issues
Just trying to save a little time for the next person to go down the path I went today.
|thread locked Quote Subscribe||
Jul 26th 2018
3 years ago