Regin Espionage Tool Detection

[Anonymous]

Hello

Are there any new Live Content to detect network communication for this Regin espionage tool, published by Symantec?

Regin: Top-tier espionage tool enables stealthy surveillance | Symantec Connect

Roland

[RSAAdmin]

There are not very many consistent network-based IOCs called out in the Regin report. There are a ton of host-based IOCs. That being said we do have some Regin IOCs in or "3rd Party IP IOC feed"