| suricata |
ET EXPLOIT Possible Saltstack Authentication Bypass CVE-2020-11651 M1 |
rev 1 |
2020-05-01 |
| suricata |
ET WEB_SERVER Generic Webshell Accessed on Internal Server |
rev 2 |
2020-05-01 |
| suricata |
ET WEB_CLIENT Generic Webshell Accessed on External Server |
rev 2 |
2020-05-01 |
| suricata |
ET WEB_SERVER Generic Mailer Accessed on Internal Server |
rev 2 |
2020-05-01 |
| snort |
ET WEB_SERVER Generic Mailer Check Accessed on Internal Server |
rev 2 |
2020-04-30 |
| snort |
ET TROJAN MINEBRIDGE CnC Request |
rev 2 |
2020-04-30 |
| snort |
ET WEB_SERVER Generic Webshell Accessed on Internal Server |
rev 2 |
2020-04-30 |
| snort |
ET WEB_SERVER Generic Mailer Accessed on Internal Server |
rev 2 |
2020-04-30 |
| suricata |
ET WEB_SPECIFIC_APPS Possible WP Plug-in MailPoet Arbitrary File Upload/Auth Bypass Vulnerability |
rev 4 |
2020-04-30 |
| suricata |
ET EXPLOIT Supermicro BMC Password Disclosure 4 |
rev 5 |
2020-04-30 |
| suricata |
ET WEB_SERVER Adobe Flash Player Rosetta Flash compressed CWS in URI |
rev 3 |
2020-04-30 |
| suricata |
ET ADWARE_PUP Optimum Installer User-Agent IE6 on Windows XP |
rev 6 |
2020-04-30 |
| snort |
ET WEB_CLIENT Generic Mailer Accessed on External Server |
rev 2 |
2020-04-29 |
| snort |
ET TROJAN IcedID CnC Domain in SNI |
rev 2 |
2020-04-29 |
| snort |
ET WEB_CLIENT Generic Webshell Accessed on External Server |
rev 2 |
2020-04-29 |
| snort |
ET TROJAN Win32/Kryptik.HCZR Variant Initial Checkin |
rev 2 |
2020-04-29 |
| snort |
ET USER_AGENTS BeeMovie Related Activity |
rev 2 |
2020-04-29 |
| snort |
ET WEB_CLIENT Generic Mailer Accessed on External Server |
rev 2 |
2020-04-29 |
| snort |
ET TROJAN IcedID CnC Domain in SNI |
rev 2 |
2020-04-29 |
| suricata |
ET WEB_SERVER Generic Mailer Check Accessed on Internal Server |
rev 2 |
2020-04-29 |
| suricata |
ET WEB_SERVER Generic Mailer Accessed on Internal Server |
rev 2 |
2020-04-29 |
| suricata |
ET SCAN IBM NSA User Agent |
rev 10 |
2020-04-29 |
| suricata |
ET WEB_CLIENT Microsoft Application Crash Report Indicates Potential VGX Memory Corruption 2 |
rev 3 |
2020-04-29 |
| suricata |
ET WEB_SERVER Generic Mailer Accessed on Internal Server |
rev 2 |
2020-04-29 |
| suricata |
ET WEB_CLIENT Microsoft Application Crash Report Indicates Potential VGX Memory Corruption |
rev 3 |
2020-04-29 |
| suricata |
ET WEB_CLIENT Generic Mailer Accessed on External Server |
rev 2 |
2020-04-29 |
| suricata |
ET WEB_SERVER Generic Webshell Accessed on Internal Server |
rev 2 |
2020-04-29 |
| suricata |
ET WEB_CLIENT Generic Mailer Accessed on External Server |
rev 2 |
2020-04-29 |
| suricata |
ET MALWARE Virut Family GET |
rev 7 |
2020-04-29 |
| suricata |
ET WEB_CLIENT Generic Webshell Accessed on External Server |
rev 2 |
2020-04-29 |
| suricata |
ET MALWARE Trojan.Win32.A.FakeAV Reporting |
rev 6 |
2020-04-29 |
| snort |
ET TROJAN BAZAR CnC Domain in DNS Lookup |
rev 2 |
2020-04-28 |
| snort |
ET WEB_SERVER AntSword Webshell Commands Inbound |
rev 2 |
2020-04-28 |
| snort |
ET TROJAN NanoCore RAT CnC 27 |
rev 3 |
2020-04-28 |
| snort |
ET TROJAN DonotGroup CnC Domain in DNS Query |
rev 2 |
2020-04-28 |
| snort |
ET INFO URL Observed in PDF Downloaded via Dropbox |
rev 2 |
2020-04-28 |
| snort |
ET TROJAN MSIL/Firebird RAT CnC Checkin |
rev 3 |
2020-04-28 |
| snort |
ET TROJAN BAZAR CnC Domain in DNS Lookup |
rev 2 |
2020-04-28 |
| snort |
ET TROJAN BAZAR CnC Domain in DNS Lookup |
rev 2 |
2020-04-28 |
| snort |
ET TROJAN BAZAR CnC Domain in DNS Lookup |
rev 2 |
2020-04-28 |