| snort |
ET TROJAN W32.Berbew Check-in |
rev 6 |
2018-07-16 |
| snort |
ET POLICY SMB2 NT Create AndX Request For a Powershell .ps1 File |
rev 2 |
2018-07-16 |
| snort |
ET POLICY SMB NT Create AndX Request For a Powershell .ps1 File |
rev 2 |
2018-07-16 |
| snort |
ET POLICY SMB NT Create AndX Request For an Executable File |
rev 2 |
2018-07-16 |
| snort |
ET TROJAN Rostpay Downloader User-Agent |
rev 2 |
2018-07-16 |
| snort |
ET WEB_SPECIFIC_APPS Fortify Software Security Center XML External Entity Injection 1 |
rev 2 |
2018-07-16 |
| snort |
ET WEB_SPECIFIC_APPS Fortify Software Security Center XML External Entity Injection 3 |
rev 2 |
2018-07-16 |
| snort |
ET WEB_SPECIFIC_APPS Fortify Software Security Center XML External Entity Injection 4 |
rev 2 |
2018-07-16 |
| snort |
ET POLICY SMB NT Create AndX Request For a DLL File |
rev 2 |
2018-07-16 |
| snort |
ET POLICY SMB NT Create AndX Request For a .bat File |
rev 2 |
2018-07-16 |
| snort |
ET POLICY SMB NT Create AndX Request For a .sys File - Possible Lateral Movement |
rev 2 |
2018-07-16 |
| snort |
ET POLICY SMB Executable File Transfer |
rev 2 |
2018-07-16 |
| snort |
ET POLICY SMB2 NT Create AndX Request For a .sys File - Possible Lateral Movement |
rev 2 |
2018-07-16 |
| snort |
ET POLICY SMB2 NT Create AndX Request For an Executable File |
rev 2 |
2018-07-16 |
| snort |
ET EXPLOIT Oracle WebLogic - wls-wsat Component Deserialization Remote Code Execution Unix |
rev 2 |
2018-07-13 |
| snort |
ET EXPLOIT Adobe Coldfusion BlazeDS Java Object Deserialization Remote Code Execution |
rev 2 |
2018-07-13 |
| snort |
ET CURRENT_EVENTS Stripe Phishing Landing Dec 09 2016 |
rev 2 |
2018-07-12 |
| snort |
ET WEB_SPECIFIC_APPS cmd powershell base64 encoded to Web Server 2 |
rev 1 |
2018-07-12 |
| snort |
ET WEB_SPECIFIC_APPS cmd powershell base64 encoded to Web Server 3 |
rev 1 |
2018-07-12 |
| snort |
ET WEB_SPECIFIC_APPS cmd powershell base64 encoded to Web Server 1 |
rev 1 |
2018-07-12 |
| snort |
ET TROJAN [eSentire] Win32/Spy.Banker.ADIO CnC Checkin |
rev 1 |
2018-07-11 |
| snort |
ET NETBIOS Microsoft Windows RRAS SMB Remote Code Execution |
rev 1 |
2018-07-11 |
| snort |
ET EXPLOIT Possible ETERNALBLUE MS17-010 Heap Spray |
rev 4 |
2018-07-11 |
| snort |
ET CURRENT_EVENTS [eSentire] Fake Flash Update 2018-07-09 |
rev 2 |
2018-07-10 |
| snort |
ET WEB_SPECIFIC_APPS GitList Argument Injection |
rev 2 |
2018-07-10 |
| snort |
ET WEB_SPECIFIC_APPS Elektronischer Leitz-Ordner 10 - SQL Injection |
rev 2 |
2018-07-10 |
| snort |
ET EXPLOIT HID VertX and Edge door controllers command_blink_on Remote Command Execution |
rev 2 |
2018-07-10 |
| snort |
ET SCAN HID VertX and Edge door controllers discover |
rev 2 |
2018-07-10 |
| snort |
ET EXPLOIT D-Link DIR601 2.02 Credential Disclosure |
rev 2 |
2018-07-10 |
| snort |
ET CURRENT_EVENTS [eSentire] Adobe Phishing Landing 2018-07-04 |
rev 3 |
2018-07-10 |
| snort |
ET EXPLOIT php script double base64 encoded Remote Code Execution 9 |
rev 2 |
2018-07-09 |
| snort |
ET EXPLOIT xdebug OS Command Execution |
rev 2 |
2018-07-09 |
| snort |
ET EXPLOIT php script double base64 encoded Remote Code Execution 3 |
rev 2 |
2018-07-09 |
| snort |
ET EXPLOIT file_put_contents php base64 encoded Remote Code Execution 3 |
rev 2 |
2018-07-09 |
| snort |
ET EXPLOIT php script double base64 encoded Remote Code Execution 4 |
rev 2 |
2018-07-09 |
| snort |
ET EXPLOIT php script double base64 encoded Remote Code Execution 8 |
rev 2 |
2018-07-09 |
| snort |
ET EXPLOIT php script base64 encoded Remote Code Execution 3 |
rev 2 |
2018-07-09 |
| snort |
ET EXPLOIT Generic system shell command to php base64 encoded Remote Code Execution 1 |
rev 2 |
2018-07-09 |
| snort |
ET EXPLOIT Generic system shell command to php base64 encoded Remote Code Execution 2 |
rev 2 |
2018-07-09 |
| snort |
ET EXPLOIT Generic system shell command to php base64 encoded Remote Code Execution 5 |
rev 2 |
2018-07-09 |