table name for signature set.

wow! very good! complex statement, thanks, almost, one last thing, I am trying to retrieve the signature (e.g .creatDocument ... )contained within the "Generic Detecttion Systems" set, which table would i find it.

 

 

 

the fact that Generic Detecttion Systems contains SQL-ING and so does the 'Systems: ms IIS , ASP' set, does that mean the asm scan each request through these sigs twice if both signatue sets are used within a policy?

 

 

crypt.