| suricata |
GPL ICMP PING BeOS4.x |
rev 8 |
2019-07-26 |
| suricata |
ET MALWARE AtomLogger Exfil via FTP |
rev 2 |
2019-07-26 |
| suricata |
ET NETBIOS Microsoft Windows RRAS SMB Remote Code Execution |
rev 1 |
2019-07-26 |
| suricata |
ET INFO Club World Casino Client in Use |
rev 4 |
2019-07-26 |
| suricata |
GPL RPC portmap admind request UDP |
rev 9 |
2019-07-26 |
| suricata |
ET EXPLOIT Generic system shell command to php base64 encoded Remote Code Execution 3 |
rev 2 |
2019-07-26 |
| suricata |
ET EXPLOIT IPMI Cipher 0 Authentication mode set |
rev 3 |
2019-07-26 |
| suricata |
ET MALWARE Windows Microsoft Windows DOS prompt command Error not recognized |
rev 1 |
2019-07-26 |
| suricata |
ET MALWARE Windows gpresult Microsoft Windows DOS prompt command exit OUTBOUND |
rev 1 |
2019-07-26 |
| suricata |
ET MALWARE Email Contains wininet.dll Call - Potentially Dridex MalDoc 3 |
rev 2 |
2019-07-26 |
| suricata |
ET P2P MS WUDO Peer Sync |
rev 1 |
2019-07-26 |
| suricata |
ET MALWARE Windows nbtstat -s Microsoft Windows DOS prompt command exit OUTBOUND |
rev 2 |
2019-07-26 |
| suricata |
GPL EXPLOIT kadmind buffer overflow attempt |
rev 9 |
2019-07-26 |
| suricata |
ET INFO Office Document Containing AutoExec Macro Via smtp |
rev 2 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB-DS IrotIsRunning attempt |
rev 5 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB-DS CoGetInstanceFromFile unicode little endian attempt |
rev 4 |
2019-07-26 |
| suricata |
GPL IMAP auth overflow attempt |
rev 3 |
2019-07-26 |
| suricata |
ET INFO Ipconfig Command in SMB Traffic - Possible Lateral Movement |
rev 1 |
2019-07-26 |
| suricata |
GPL ATTACK_RESPONSE id check returned root |
rev 7 |
2019-07-26 |
| suricata |
ET WEB_SPECIFIC_APPS e107 CMS backdoor access admin-access cookie and HTTP POST |
rev 3 |
2019-07-26 |
| suricata |
GPL NETBIOS DCERPC Messenger Service buffer overflow attempt |
rev 10 |
2019-07-26 |
| suricata |
ET EXPLOIT Nanopool Claymore Dual Miner Remote Code Execution Windows |
rev 2 |
2019-07-26 |
| suricata |
ET INFO Google Talk TLS Client Traffic |
rev 4 |
2019-07-26 |
| suricata |
ET EXPLOIT Possible CVE-2016-0777 Client Sent Roaming Resume Request |
rev 2 |
2019-07-26 |
| suricata |
ET MALWARE Linux/Yangji.A Checkin |
rev 1 |
2019-07-26 |
| suricata |
ET P2P Vuze BT Connection |
rev 5 |
2019-07-26 |
| suricata |
ET EXPLOIT Possible CVE-2015-7547 Long Response to A lookup |
rev 1 |
2019-07-26 |
| suricata |
ET INFO Command Shell Activity Over SMB - Possible Lateral Movement |
rev 2 |
2019-07-26 |
| suricata |
ET VOIP Possible Modified Sipvicious OPTIONS Scan |
rev 2 |
2019-07-26 |
| suricata |
ET EXPLOIT Possible CVE-2016-0777 Server Advertises Suspicious Roaming Support |
rev 2 |
2019-07-26 |
| suricata |
GPL NETBIOS SMB NT Trans NT CREATE unicode SACL overflow attempt |
rev 5 |
2019-07-26 |
| suricata |
ET MALWARE Win32/Bulta CnC Beacon |
rev 2 |
2019-07-26 |
| snort |
ET TROJAN TeamBot CnC Activity |
rev 3 |
2019-07-24 |
| snort |
ET TROJAN Phorpiex CnC Domain in DNS Lookup |
rev 2 |
2019-07-24 |
| snort |
ET TROJAN LooCipher Ransomware Onion Domain |
rev 2 |
2019-07-24 |
| snort |
ET TROJAN FIN8 ShellTea CnC in DNS Query |
rev 2 |
2019-07-23 |
| snort |
ET TROJAN FIN8 ShellTea CnC in DNS Query |
rev 2 |
2019-07-23 |
| snort |
ET TROJAN FIN8 ShellTea CnC in DNS Query |
rev 2 |
2019-07-23 |
| snort |
ET TROJAN FIN8 ShellTea CnC in DNS Query |
rev 2 |
2019-07-23 |
| snort |
ET TROJAN FIN8 ShellTea CnC in DNS Query |
rev 2 |
2019-07-23 |