Attack Analysis / IPS

McAfee IPS : Analysis of XMAS Probe, Illegal FIN Probe, NULL Probe & SYN FIN Based Probe Signatures

For one customer, the IPS report showed a large number of alerts triggered for TCP probe signatures, we needed to analyze those in order to find out why these packets exist in the network.