How to stop MortiAgent Malware using the snort rule ?

Software Version

9.0.5

Problem Description:  How to stop MortiAgent Malware using snort rule ?

I want to stop the MoriAgent malware by applying /using snort rule & also using yara rule?

How to configure this in Palo alto ?

Below are snort & Yara Rules:

1

Minemeld Syslog Miner Not parsing Messages

Hi, I am working with a new installation of Minemeld running on ubuntu 16.04. if I do a TCP dump I can see the Syslog but minemeld is not parsing them. I check the /var/log/Syslog and found this.

It seems that some modules are missing and that gives a

Tofsee TLS Fingerprint Detection

Hi all,

Since the moment we updated our threat database to 8204-5736 we see THOUSANDS of 'Tofsee TLS Fingerprint Detection' threat matches.

I assume they are false positives? Anyone else seeing the same?

It's skewing our monitoring stats significantly s

How to detect zip bomb file?

Hi,

I got following new malicious nature.

https://fossbytes.com/zipbomb-unzips-46mb-file-into-4-5-petabytes/

https://www.bamsoftware.com/hacks/zipbomb/

Can PA or Wildfire detect a zip bomb file?

DNS sinkhole v9.0.1

Have 2 HA VMs with 9.0.1

Following this article: https://docs.paloaltonetworks.com/pan-os/9-0/pan-os-admin/threat-prevention/use-dns-queries-to-identify-infected-hosts-on-the-network/identify-infected-hosts.html

In section 3), how does this need to b