While looking for interesting detects to analyse from www.incidents.org/logs/Raw, I came across the Snort 'BACKDOOR Q access' alert and was fascinated by the strange packets. As far as I could tell nobody else from the IT security community had taken a really good look at Q and published their...