Custom Threat Signatures on Your Firewall
In this demonstration, I show how to build a custom network signature on your Palo Alto Networks next generation firewall. I explain why building a signature on your firewall is better than spending time and money on additional IDS infrastructure. I then dissect a recently-released vulnerability and build a custom signature for it.
References:
CVE 2022-41392: https://cve.mitre.org/cgi-bin/cvename...
String contexts: https://docs.paloaltonetworks.com/pan...
Regex syntax: https://docs.paloaltonetworks.com/pan...