Glossary: Logs and Data Sources for Investigations

Signature

Also written: custom signature, rule

A pattern describing a known bad file or known bad traffic, which antivirus or an IDS matches against. A brand-new attacker tool matches no signature until someone writes one, as Alex did for ClamAV.