topic Re: How to detect zip bomb file? in Advanced Threat Prevention Discussions

topic Re: How to detect zip bomb file? in Advanced Threat Prevention Discussions https://live.paloaltonetworks.com/t5/advanced-threat-prevention/how-to-detect-zip-bomb-file/m-p/323538#M798 <P>You may use a custom signature with this context to specify above which compression ratio you may want to alert or block. <A href="https://docs.paloaltonetworks.com/pan-os/u-v/custom-app-id-and-threat-signatures/custom-application-and-threat-signatures/custom-signature-contexts/integer-contexts/panav-rsp-zip-compression-ratiio.html" target="_blank">https://docs.paloaltonetworks.com/pan-os/u-v/custom-app-id-and-threat-signatures/custom-application-and-threat-signatures/custom-signature-contexts/integer-contexts/panav-rsp-zip-compression-ratiio.html</A></P> Sat, 18 Apr 2020 04:11:47 GMT ilam 2020-04-18T04:11:47Z How to detect zip bomb file? https://live.paloaltonetworks.com/t5/advanced-threat-prevention/how-to-detect-zip-bomb-file/m-p/276983#M612 <P>Hi,</P><P> </P><P>I got following new <SPAN>malicious nature.</SPAN></P><P><A href="https://fossbytes.com/zipbomb-unzips-46mb-file-into-4-5-petabytes/" target="_blank">https://fossbytes.com/zipbomb-unzips-46mb-file-into-4-5-petabytes/</A></P><P><A href="https://www.bamsoftware.com/hacks/zipbomb/" target="_blank">https://www.bamsoftware.com/hacks/zipbomb/</A></P><P> </P><P>Can PA or Wildfire detect a zip bomb file?</P><P> </P><P> </P> Wed, 17 Jul 2019 08:59:22 GMT https://live.paloaltonetworks.com/t5/advanced-threat-prevention/how-to-detect-zip-bomb-file/m-p/276983#M612 Mt_103 2019-07-17T08:59:22Z Re: How to detect zip bomb file? https://live.paloaltonetworks.com/t5/advanced-threat-prevention/how-to-detect-zip-bomb-file/m-p/323538#M798 <P>You may use a custom signature with this context to specify above which compression ratio you may want to alert or block. <A href="https://docs.paloaltonetworks.com/pan-os/u-v/custom-app-id-and-threat-signatures/custom-application-and-threat-signatures/custom-signature-contexts/integer-contexts/panav-rsp-zip-compression-ratiio.html" target="_blank">https://docs.paloaltonetworks.com/pan-os/u-v/custom-app-id-and-threat-signatures/custom-application-and-threat-signatures/custom-signature-contexts/integer-contexts/panav-rsp-zip-compression-ratiio.html</A></P> Sat, 18 Apr 2020 04:11:47 GMT https://live.paloaltonetworks.com/t5/advanced-threat-prevention/how-to-detect-zip-bomb-file/m-p/323538#M798 ilam 2020-04-18T04:11:47Z