Cyber security firm FireEye recently disclosed an incident that resulted in the inadvertent disclosure of various internally developed offensive security tools. Some of these tools appear to be based on well-known offensive frameworks like Cobalt Strike. FireEye provided a list of CVEs in their blog to allow customers to assess their vulnerability to the tools. The company also released several new rules that protect against these vulnerabilities, specifically defending against the use of Cobalt strike. For more, check our full rule advisory here.”]
Source: https://blog.snort.org/2020/12/snort-rule-update-for-dec-9-2020.html