<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>R-fx Networks &#187; malware</title>
	<atom:link href="http://www.rfxn.com/tag/malware/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.rfxn.com</link>
	<description> Linux Software &#38; Blog</description>
	<lastBuildDate>Sat, 24 Jul 2010 19:50:09 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.9.2</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>Signature Updates: Month In Review</title>
		<link>http://www.rfxn.com/signature-updates-month-in-review/</link>
		<comments>http://www.rfxn.com/signature-updates-month-in-review/#comments</comments>
		<pubDate>Sat, 24 Jul 2010 19:15:38 +0000</pubDate>
		<dc:creator>Ryan M.</dc:creator>
				<category><![CDATA[Development]]></category>
		<category><![CDATA[My Blog]]></category>
		<category><![CDATA[lmd]]></category>
		<category><![CDATA[malware]]></category>
		<category><![CDATA[projects]]></category>

		<guid isPermaLink="false">http://www.rfxn.com/?p=611</guid>
		<description><![CDATA[Since I will be busy this coming week with other priorities, I am posting an early month in review blog on signature updates. 
In the last 3 weeks we have not seen a whole lot of action on in-the-wild malware, most of what is propagating at the moment are variants of already detected content. That <a href="http://www.rfxn.com/signature-updates-month-in-review/" class="more-link">More &#62;</a>]]></description>
		<wfw:commentRss>http://www.rfxn.com/signature-updates-month-in-review/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Signatures For The Masses</title>
		<link>http://www.rfxn.com/signatures-for-the-masses/</link>
		<comments>http://www.rfxn.com/signatures-for-the-masses/#comments</comments>
		<pubDate>Sun, 27 Jun 2010 01:06:25 +0000</pubDate>
		<dc:creator>Ryan M.</dc:creator>
				<category><![CDATA[Development]]></category>
		<category><![CDATA[lmd]]></category>
		<category><![CDATA[malware]]></category>

		<guid isPermaLink="false">http://www.rfxn.com/?p=579</guid>
		<description><![CDATA[Today I found the time and energy, despite how tedious it was, to go over the last two weeks worth of malware submissions and missed edge IPS data from when I was away. This resulted in a total of 126 new signatures (67 MD5 / 59 HEX) which brings LMD to a total of 2,471 <a href="http://www.rfxn.com/signatures-for-the-masses/" class="more-link">More &#62;</a>]]></description>
		<wfw:commentRss>http://www.rfxn.com/signatures-for-the-masses/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>I am Back: Signature Updates</title>
		<link>http://www.rfxn.com/i-am-back-signature-updates/</link>
		<comments>http://www.rfxn.com/i-am-back-signature-updates/#comments</comments>
		<pubDate>Thu, 24 Jun 2010 05:37:52 +0000</pubDate>
		<dc:creator>Ryan M.</dc:creator>
				<category><![CDATA[Development]]></category>
		<category><![CDATA[lmd]]></category>
		<category><![CDATA[malware]]></category>

		<guid isPermaLink="false">http://www.rfxn.com/?p=572</guid>
		<description><![CDATA[I am back, fresh off a trip home to Montreal, which I must say was an absolutely amazing time. It has left me reflecting on allot of things, most importantly that there really is no place like home &#8212; I miss Montreal more than I can even describe. That said though, time to get back <a href="http://www.rfxn.com/i-am-back-signature-updates/" class="more-link">More &#62;</a>]]></description>
		<wfw:commentRss>http://www.rfxn.com/i-am-back-signature-updates/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Linux Malware Detect v1.3.6: Loose Ends</title>
		<link>http://www.rfxn.com/linux-malware-detect-loose-ends/</link>
		<comments>http://www.rfxn.com/linux-malware-detect-loose-ends/#comments</comments>
		<pubDate>Mon, 24 May 2010 17:33:27 +0000</pubDate>
		<dc:creator>Ryan M.</dc:creator>
				<category><![CDATA[Development]]></category>
		<category><![CDATA[My Blog]]></category>
		<category><![CDATA[bugs]]></category>
		<category><![CDATA[linux]]></category>
		<category><![CDATA[lmd]]></category>
		<category><![CDATA[malware]]></category>
		<category><![CDATA[projects]]></category>

		<guid isPermaLink="false">http://www.rfxn.com/?p=511</guid>
		<description><![CDATA[In LMD 1.3.3 there was allot of changes, 29 to be exact, that made LMD much more robust and especially the monitoring component, much more usable. If that release was about making good things better, then this release is about bringing loose ends together. I spent a couple of days running LMD through its paces <a href="http://www.rfxn.com/linux-malware-detect-loose-ends/" class="more-link">More &#62;</a>]]></description>
		<wfw:commentRss>http://www.rfxn.com/linux-malware-detect-loose-ends/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Linux Malware Detect v1.3.3: Making good things better</title>
		<link>http://www.rfxn.com/linux-malware-detect-v1-3-3-making-good-things-better/</link>
		<comments>http://www.rfxn.com/linux-malware-detect-v1-3-3-making-good-things-better/#comments</comments>
		<pubDate>Sat, 15 May 2010 06:45:27 +0000</pubDate>
		<dc:creator>Ryan M.</dc:creator>
				<category><![CDATA[Development]]></category>
		<category><![CDATA[lmd]]></category>
		<category><![CDATA[malware]]></category>
		<category><![CDATA[projects]]></category>
		<category><![CDATA[upgrade]]></category>

		<guid isPermaLink="false">http://www.rfxn.com/?p=461</guid>
		<description><![CDATA[This morning I have put out LMD v1.3.3, this is on the back of two other successive releases in recent days that improved LMD in many areas, along with correcting some bugs that were graciously reported by those helping to break-in the project. I have also listened to feedback and revised a number of features <a href="http://www.rfxn.com/linux-malware-detect-v1-3-3-making-good-things-better/" class="more-link">More &#62;</a>]]></description>
		<wfw:commentRss>http://www.rfxn.com/linux-malware-detect-v1-3-3-making-good-things-better/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>LMD Signatures: RSS Feed &amp; XML</title>
		<link>http://www.rfxn.com/signature-updates-rss-feed/</link>
		<comments>http://www.rfxn.com/signature-updates-rss-feed/#comments</comments>
		<pubDate>Thu, 13 May 2010 00:40:50 +0000</pubDate>
		<dc:creator>Ryan M.</dc:creator>
				<category><![CDATA[Development]]></category>
		<category><![CDATA[lmd]]></category>
		<category><![CDATA[malware]]></category>

		<guid isPermaLink="false">http://www.rfxn.com/?p=446</guid>
		<description><![CDATA[While I was making some signature updates this afternoon, It occurred to me that it might be useful if the signatures were available through an RSS feed for update tracking or should anyone want to serialize the importing of my signature data into other applications.
The signatures can be access in two data formats, the first <a href="http://www.rfxn.com/signature-updates-rss-feed/" class="more-link">More &#62;</a>]]></description>
		<wfw:commentRss>http://www.rfxn.com/signature-updates-rss-feed/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Better Late Than Never: Linux Malware Detect 1.3</title>
		<link>http://www.rfxn.com/better-late-than-never-linux-malware-detect-1-3/</link>
		<comments>http://www.rfxn.com/better-late-than-never-linux-malware-detect-1-3/#comments</comments>
		<pubDate>Wed, 12 May 2010 05:13:23 +0000</pubDate>
		<dc:creator>Ryan M.</dc:creator>
				<category><![CDATA[Development]]></category>
		<category><![CDATA[My Blog]]></category>
		<category><![CDATA[linux]]></category>
		<category><![CDATA[lmd]]></category>
		<category><![CDATA[malware]]></category>
		<category><![CDATA[projects]]></category>

		<guid isPermaLink="false">http://www.rfxn.com/?p=432</guid>
		<description><![CDATA[Today I have released Linux Malware Detect (LMD) 1.3, the first public stable release of my malware detection tool. The documentation is a little thin but the details are on the project page and the README file should fill you in on anything you need to know, otherwise you can post a comment on the <a href="http://www.rfxn.com/better-late-than-never-linux-malware-detect-1-3/" class="more-link">More &#62;</a>]]></description>
		<wfw:commentRss>http://www.rfxn.com/better-late-than-never-linux-malware-detect-1-3/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Out with the old, In with the new!</title>
		<link>http://www.rfxn.com/out-with-the-old-in-with-the-new/</link>
		<comments>http://www.rfxn.com/out-with-the-old-in-with-the-new/#comments</comments>
		<pubDate>Thu, 06 May 2010 07:25:11 +0000</pubDate>
		<dc:creator>Ryan M.</dc:creator>
				<category><![CDATA[My Blog]]></category>
		<category><![CDATA[apf]]></category>
		<category><![CDATA[atf]]></category>
		<category><![CDATA[bfd]]></category>
		<category><![CDATA[malware]]></category>

		<guid isPermaLink="false">http://www.rfxn.com/?p=310</guid>
		<description><![CDATA[The old theme was doing my head in, so I ditched it. Keep an eye out in the coming days/weeks for new releases of APF &#038; BFD in addition to a few more howto entries and the release of maldetect with a ATF stats landing page.
]]></description>
		<wfw:commentRss>http://www.rfxn.com/out-with-the-old-in-with-the-new/feed/</wfw:commentRss>
		<slash:comments>1</slash:comments>
		</item>
		<item>
		<title>Linux Malware Detectection</title>
		<link>http://www.rfxn.com/linux-malware-detectection/</link>
		<comments>http://www.rfxn.com/linux-malware-detectection/#comments</comments>
		<pubDate>Mon, 19 Oct 2009 05:35:06 +0000</pubDate>
		<dc:creator>Ryan M.</dc:creator>
				<category><![CDATA[Development]]></category>
		<category><![CDATA[ips]]></category>
		<category><![CDATA[linux]]></category>
		<category><![CDATA[malware]]></category>
		<category><![CDATA[snort]]></category>

		<guid isPermaLink="false">http://www.rfxn.com/?p=149</guid>
		<description><![CDATA[[ UPDATE: Linux Malware Detect has been released ]
I have the last few weeks been working on a new project for malware detection on Linux web servers, it is already at a pre-release version in use at work and it has shown phenomenal promise.
Right to it, some background&#8230; On a daily basis the network I <a href="http://www.rfxn.com/linux-malware-detectection/" class="more-link">More &#62;</a>]]></description>
		<wfw:commentRss>http://www.rfxn.com/linux-malware-detectection/feed/</wfw:commentRss>
		<slash:comments>7</slash:comments>
		</item>
	</channel>
</rss>
