They linked their Snort rules, in case anybody else is interested: https://github.com/fireeye/red_team_tool_countermeasures/blob/master/all-snort.rules https:/

They linked their Snort rules, in case anybody else is interested: https://github.com/fireeye/red_team_tool_countermeasures/blob/master/all-snort.rules https://github.com/fireeye/red_team_tool_countermeasures/blo... It'll be interesting to see if these get any hits from scanners in the next couple weeks...