| suricata |
GPL DNS named version attempt |
rev 9 |
2019-07-26 |
| suricata |
ET EXPLOIT NB8-01 - Unauthed RCE via bprd |
rev 1 |
2019-07-26 |
| suricata |
ET MALWARE US-CERT TA14-353A Proxy Tool 2 |
rev 1 |
2019-07-26 |
| suricata |
ET INFO Google Talk TLS Client Traffic |
rev 4 |
2019-07-26 |
| suricata |
ET SCADA RealWin SCADA System Buffer Overflow |
rev 1 |
2019-07-26 |
| suricata |
ET INFO RunDll Request Over SMB - Likely Lateral Movement |
rev 3 |
2019-07-26 |
| suricata |
ET COINMINER W32/BitCoinMiner.MultiThreat Stratum Protocol Mining.Notify Work Server Response |
rev 3 |
2019-07-26 |
| suricata |
ET EXPLOIT IPMI Cipher 0 Authentication mode set |
rev 3 |
2019-07-26 |
| suricata |
ET MALWARE MSIL.Orion Stealer Exfil via FTP |
rev 2 |
2019-07-26 |
| suricata |
GPL VOIP SIP 407 Proxy Authentication Required Flood |
rev 4 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB-DS RemoteActivation unicode little endian attempt |
rev 4 |
2019-07-26 |
| suricata |
ET EXPLOIT Generic system shell command to php base64 encoded Remote Code Execution 3 |
rev 2 |
2019-07-26 |
| suricata |
ET INFO Office Document Containing AutoExec Macro Via smtp |
rev 2 |
2019-07-26 |
| suricata |
ET MALWARE Linux/AES.DDoS Sending Real/Fake CPU&BW Info |
rev 3 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB-DS IrotIsRunning little endian attempt |
rev 5 |
2019-07-26 |
| suricata |
ET NETBIOS Microsoft Windows RRAS SMB Remote Code Execution |
rev 1 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB-DS RemoteActivation little endian attempt |
rev 4 |
2019-07-26 |
| suricata |
ET MALWARE Machete FTP activity |
rev 2 |
2019-07-26 |
| suricata |
ET MALWARE [PTsecurity] Remcos RAT Checkin 69 |
rev 1 |
2019-07-26 |
| suricata |
ET P2P TOR 1.0 Status Update |
rev 5 |
2019-07-26 |
| suricata |
ET INFO Office Document Containing AutoExec Macro Via smtp |
rev 2 |
2019-07-26 |
| suricata |
ET SCAN Potential SSH Scan |
rev 20 |
2019-07-26 |
| suricata |
ET SCAN Smap VOIP Device Scan |
rev 5 |
2019-07-26 |
| suricata |
ET MALWARE Possible Infection Report Mail - Indy Mail lib and No Message Body - Priority 3 |
rev 8 |
2019-07-26 |
| suricata |
ET INFO Bitmessage Activity |
rev 2 |
2019-07-26 |
| suricata |
ET TFTP Outbound TFTP Data Transfer with Cisco config |
rev 5 |
2019-07-26 |
| suricata |
ET MALWARE Win32/Enchanim C2 Client Check-in |
rev 2 |
2019-07-26 |
| suricata |
GPL IMAP delete overflow attempt |
rev 2 |
2019-07-26 |
| suricata |
ET MALWARE Carbanak APT CnC Beacon 1 |
rev 2 |
2019-07-26 |
| suricata |
ET WEB_SPECIFIC_APPS ELF file magic encoded Base64 Hex Escape Inbound Web Servers Likely Command Execution 9 |
rev 1 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB-DS NDdeSetTrustedShareW unicode little endian overflow attempt |
rev 7 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB IrotIsRunning attempt |
rev 5 |
2019-07-26 |
| suricata |
ET INFO SMB NT Create AndX Request For a Powershell .ps1 File |
rev 2 |
2019-07-26 |
| suricata |
ET MALWARE Wrapper/Gholee/Wedex Checkin |
rev 1 |
2019-07-26 |
| suricata |
ET MALWARE W32.Duptwux/Ganelp FTP Username - onthelinux |
rev 3 |
2019-07-26 |
| suricata |
ET ATTACK_RESPONSE Windows 64bit procdump Dump File Exfiltration |
rev 2 |
2019-07-26 |
| suricata |
ET MALWARE Possible Infection Report Mail - Indy Mail lib and Nome do Computador in Body |
rev 5 |
2019-07-26 |
| suricata |
ET MALWARE Windows nbtstat -s Microsoft Windows DOS prompt command exit OUTBOUND |
rev 2 |
2019-07-26 |
| suricata |
ET MALWARE W32/Mentory CnC Server Providing Update Details |
rev 2 |
2019-07-26 |
| suricata |
GPL IMAP auth overflow attempt |
rev 3 |
2019-07-26 |