McAfee AV signatures

[Ilyes23i]

Hello,

Please i'm trying to build some detection rules based on the McAfee AV signatures, is there any resource  where i can found all the Attack Signatures for the McAfee AV example : HIPS signature.

I'm note familiar with McAfee products and this is my first experience, but with other products there is always something like that example with Symantec AV :  broad com AV Attack Signatures.

Please any help,

King regards,

[Pravas]

Hi @Ilyes23i ,

Host Intrusion Prevention (HIPS) product has reached EOL and no longer supported.

You may use Endpoint Security that has HIPS integrated in Exploit Prevention feature.

To read more about it please refer the link below.

https://docs.trellix.com/bundle/endpoint-security-10.6.0-threat-prevention-client-interface-referenc...

Thanks

[Ilyes23i]

Hello,

Thank you very much for the information, now what we are looking for is the list of signatures supported in order to explore them and make alerts based on those signatures.

In the link they are referring to "Knowledge Center for KB51504" and i'm note sure if the answer of the request is there, but i can't access, any assist please and have nice day,

Kind regards,