| suricata |
GPL NETBIOS SMB NT Trans NT CREATE invalid SACL ace size dos attempt |
rev 5 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB-DS RemoteActivation attempt |
rev 4 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB NT Trans NT CREATE unicode DACL overflow attempt |
rev 5 |
2019-07-26 |
| suricata |
ET INFO SMB Remote AT Scheduled Job Pipe Creation |
rev 2 |
2019-07-26 |
| suricata |
ET DOS Possible Memcached DDoS Amplification Inbound |
rev 1 |
2019-07-26 |
| suricata |
ET MALWARE DoS.Linux/Elknot.E Checkin |
rev 2 |
2019-07-26 |
| suricata |
ET MALWARE LuminosityLink - Data Channel Server Response |
rev 1 |
2019-07-26 |
| suricata |
ET WEB_SERVER Mambo.PerlBot Spreader IRC DDOS Attack Done Message |
rev 1 |
2019-07-26 |
| suricata |
ET INFO Powershell Activity Over SMB - Likely Lateral Movement |
rev 3 |
2019-07-26 |
| suricata |
ET EXPLOIT Cisco Smart Install Exploitation Tool - ChangeConfig |
rev 1 |
2019-07-26 |
| suricata |
ET SCAN Amap UDP Service Scan Detected |
rev 2 |
2019-07-26 |
| suricata |
ET MALWARE Observed UltraVNC CnC Activity |
rev 2 |
2019-07-26 |
| suricata |
ET MALWARE Win32.ChinaZ.DDoSClient Checkin |
rev 2 |
2019-07-26 |
| suricata |
ET EXPLOIT bin bash base64 encoded Remote Code Execution 1 |
rev 2 |
2019-07-26 |
| suricata |
ET DOS Likely NTP DDoS In Progress MON_LIST Response to Non-Ephemeral Port IMPL 0x03 |
rev 3 |
2019-07-26 |
| suricata |
ET MALWARE W32/SpyBanker Infection Confirmation Email 2 |
rev 2 |
2019-07-26 |
| suricata |
ET TFTP Outbound TFTP ACK |
rev 3 |
2019-07-26 |
| suricata |
ET MALWARE OSX/OceanLotus / ELF/RotaJakario CnC Checkin |
rev 1 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB OpenKey overflow attempt |
rev 5 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB-DS OpenKey little endian overflow attempt |
rev 4 |
2019-07-26 |
| suricata |
ET VOIP Modified Sipvicious Asterisk PBX User-Agent |
rev 2 |
2019-07-26 |
| suricata |
GPL ICMP PING Microsoft Windows |
rev 8 |
2019-07-26 |
| suricata |
GPL IMAP authenticate overflow attempt |
rev 12 |
2019-07-26 |
| suricata |
ET TFTP Outbound TFTP Data Transfer With Cisco Config 2 |
rev 2 |
2019-07-26 |
| suricata |
ET MALWARE [PTsecurity] Remcos RAT Checkin 85 |
rev 2 |
2019-07-26 |
| suricata |
ET MALWARE [GIGAMON_ATR] FIN8 BADHATCH Remote Shell Banner |
rev 1 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB-DS llsrconnect unicode overflow attempt |
rev 4 |
2019-07-26 |
| suricata |
ET MALWARE Windows WMIC SHARE get Microsoft Windows DOS prompt command exit OUTBOUND |
rev 1 |
2019-07-26 |
| suricata |
ET WEB_SERVER Perl/Mambo.WebShell Spreader IRC Scanning Message |
rev 2 |
2019-07-26 |
| suricata |
ET MALWARE OSX/Mami Possible DNS Query to Evil DNS Server |
rev 1 |
2019-07-26 |
| suricata |
ET P2P Limewire P2P UDP Traffic |
rev 8 |
2019-07-26 |
| suricata |
ET MALWARE Banker.Delf Infection - Sending Initial Email to Owner |
rev 8 |
2019-07-26 |
| snort |
ET TROJAN TeamBot CnC Activity |
rev 3 |
2019-07-24 |
| snort |
ET TROJAN LooCipher Ransomware Onion Domain |
rev 2 |
2019-07-24 |
| snort |
ET TROJAN Phorpiex CnC Domain in DNS Lookup |
rev 2 |
2019-07-24 |
| snort |
ET TROJAN FIN8 ShellTea CnC in DNS Query |
rev 2 |
2019-07-23 |
| snort |
ET TROJAN FIN8 ShellTea CnC in DNS Query |
rev 2 |
2019-07-23 |
| snort |
ET TROJAN FIN8 ShellTea CnC in DNS Query |
rev 2 |
2019-07-23 |
| snort |
ET TROJAN FIN8 ShellTea CnC in DNS Query |
rev 2 |
2019-07-23 |
| snort |
ET TROJAN [GIGAMON_ATR] FIN8 BADHATCH Remote Shell Banner |
rev 1 |
2019-07-23 |