[solved]-Create Snort Rule Explain Reasoning Everything Answer Q39050033

Create a snort rule for above.

EXPLAIN REASONING AND EVERYTHING FOR ANSWER

GET /j.jpg HTTP/1.1 User-Agent: Wget/1.13.4 (linux-gnu) Accept: */* Host: cdc.com Connection: keep-Alive HTTP/1.1 200 OK Content-Type: image/jpeg Last-Modified: Tue, 11 Mar 2014 19:00:11 GMT Accept-Ranges: bytes E Tag: “49a299205c3dcf1:0” Server: Microsoft-IIS/8.0 Date: Tue, 11 Mar 2014 19:07:57 GMT Content-Length: 1335971500 PK. . . . . . . . . UDZ. . }.N.O.. NP…. credit cards.csv.. JO.P………. …..D..V……..L. 0.m…;….-._B#.@…N… FQ…. S…YA ………………….. ……… . [.s.’…b…S…..V.#..{…XOW…..a…d…ec…7. W}r<jh.c..z.S[..wuk. …5……25…… /……..A +.l. . TJe3. k…#.K.U.S.L.K. … ]w..HM{.rp**.. ……..0.9.3n…M.b**’-.d…G/…..M… ..A…………………._*). …..kl….. L.R. .1. … …dy..). $u. – ..HZ. …..:..7m.y…………bx. .28. . . _GGI…D.c#ZN…….2.1. k_…………….V I. ….. hdM. 2.50R. GIGhQs….e… Kg.d……?0…0………..9….%}Q- …….D… T2… {? Show transcribed image text GET /j.jpg HTTP/1.1 User-Agent: Wget/1.13.4 (linux-gnu) Accept: */* Host: cdc.com Connection: keep-Alive HTTP/1.1 200 OK Content-Type: image/jpeg Last-Modified: Tue, 11 Mar 2014 19:00:11 GMT Accept-Ranges: bytes E Tag: “49a299205c3dcf1:0” Server: Microsoft-IIS/8.0 Date: Tue, 11 Mar 2014 19:07:57 GMT Content-Length: 1335971500 PK. . . . . . . . . UDZ. . }.N.O.. NP…. credit cards.csv.. JO.P………. …..D..V……..L. 0.m…;….-._B#.@…N… FQ…. S…YA ………………….. ……… . [.s.’…b…S…..V.#..{…XOW…..a…d…ec…7. W}r

Expert Answer

---

Answer to Create a snort rule for above. EXPLAIN REASONING AND EVERYTHING FOR ANSWER… . . .