| suricata |
ET ACTIVEX SoftCab Sound Converter ActiveX SaveFormat File overwrite Attempt |
rev 2 |
2019-07-26 |
| suricata |
ET FTP Possible FTP Daemon Username UPDATE SET SQL Injection Attempt |
rev 2 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB llsrconnect unicode overflow attempt |
rev 5 |
2019-07-26 |
| suricata |
ET MALWARE Py/MechaFlounder CnC Activity - Reporting Directory Change Command Success |
rev 1 |
2019-07-26 |
| suricata |
ET MALWARE US-CERT TA14-353A Wiper 2 |
rev 1 |
2019-07-26 |
| suricata |
ET EXPLOIT Possible Cisco IKEv1 Information Disclosure Vulnerability CVE-2016-6415 |
rev 1 |
2019-07-26 |
| suricata |
ET INFO HTTP OPTIONS invalid method case outbound |
rev 2 |
2019-07-26 |
| suricata |
ET NETBIOS Microsoft Windows NETAPI Stack Overflow Inbound - MS08-067 - Known Exploit Instance |
rev 5 |
2019-07-26 |
| suricata |
ET SCADA CitectSCADA ODBC Overflow Attempt |
rev 8 |
2019-07-26 |
| suricata |
GPL ICMP PING *NIX |
rev 8 |
2019-07-26 |
| suricata |
ET SCAN DCERPC rpcmgmt ifids Unauthenticated BIND |
rev 3 |
2019-07-26 |
| suricata |
ET INFO Command Shell Activity Over SMB - Possible Lateral Movement |
rev 2 |
2019-07-26 |
| suricata |
ET MALWARE [PTsecurity] Remcos RAT Checkin 70 |
rev 1 |
2019-07-26 |
| suricata |
ET SNMP missing community string attempt 4 |
rev 2 |
2019-07-26 |
| suricata |
ET ATTACK_RESPONSE Windows 32bit procdump Dump File Exfiltration |
rev 2 |
2019-07-26 |
| suricata |
ET MALWARE Win32/Spy.Agent.OHT - AnunakAPT TCP Keep-Alive |
rev 2 |
2019-07-26 |
| suricata |
GPL DNS zone transfer UDP |
rev 8 |
2019-07-26 |
| suricata |
ET WEB_SERVER Mambo.PerlBot Spreader IRC DDOS PerlBot Version Message |
rev 2 |
2019-07-26 |
| suricata |
ET SCAN Voiper Fuzzing Scan |
rev 3 |
2019-07-26 |
| suricata |
ET MALWARE Linux/ShellshockCampaign.DDOSBot Terminate Process CnC Server Message |
rev 2 |
2019-07-26 |
| suricata |
ET WEB_CLIENT Hex Obfuscation of charCodeAt %u UTF-8 Encoding |
rev 2 |
2019-07-26 |
| suricata |
GPL EXPLOIT Microsoft cmd.exe banner |
rev 7 |
2019-07-26 |
| suricata |
GPL RPC portmap SET attempt UDP 111 |
rev 6 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB-DS NT Trans NT CREATE invalid SACL ace size dos attempt |
rev 5 |
2019-07-26 |
| suricata |
ET INFO SMB NT Create AndX Request For a .bat File |
rev 2 |
2019-07-26 |
| suricata |
GPL RPC portmap cmsd request UDP |
rev 9 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB-DS llsrconnect little endian overflow attempt |
rev 4 |
2019-07-26 |
| suricata |
GPL SCAN PING Sniffer Pro/NetXRay network scan |
rev 5 |
2019-07-26 |
| suricata |
ET SCAN HTExploit Method |
rev 2 |
2019-07-26 |
| suricata |
ET COINMINER W32/BitCoinMiner.MultiThreat Getblocktemplate Protocol Server Connection |
rev 3 |
2019-07-26 |
| suricata |
ET MALWARE Email Contains wininet.dll Call - Potentially Dridex MalDoc 2 |
rev 2 |
2019-07-26 |
| suricata |
ET INFO HSRP Active Router Changed |
rev 2 |
2019-07-26 |
| suricata |
GPL RPC portmap ypserv request UDP |
rev 13 |
2019-07-26 |
| suricata |
ET DOS Possible NTP DDoS Inbound Frequent Un-Authed PEER_LIST_SUM Requests IMPL 0x02 |
rev 3 |
2019-07-26 |
| suricata |
ET MALWARE NetWire Variant - Server Directory Listing Request |
rev 2 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB-DS NT Trans NT CREATE unicode DACL overflow attempt |
rev 5 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB-DS ADMIN$ unicode share access |
rev 9 |
2019-07-26 |
| suricata |
ET EXPLOIT php script base64 encoded Remote Code Execution 1 |
rev 2 |
2019-07-26 |
| suricata |
ET MALWARE Windows quser Microsoft Windows DOS prompt command exit OUTBOUND |
rev 1 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB-DS NT Trans NT CREATE unicode SACL overflow attempt |
rev 5 |
2019-07-26 |