| snort |
ET INFO Java Downloading Class flowbit no alert |
rev 5 |
2013-11-25 |
| snort |
ET WEB_CLIENT SUSPICIOUS Java Request With Uncompressed JAR/Class file Importing Protection Domain |
rev 1 |
2013-11-25 |
| snort |
ET CURRENT_EVENTS Possible WhiteLotus EK 2013-2551 Exploit 3 |
rev 3 |
2013-11-21 |
| snort |
ET CURRENT_EVENTS Possible WhiteLotus EK 2013-2551 Exploit 2 |
rev 3 |
2013-11-21 |
| snort |
ET CURRENT_EVENTS Possible WhiteLotus EK 2013-2551 Exploit 1 |
rev 3 |
2013-11-21 |
| snort |
ET TROJAN Trojan.Dropper.Win32.Dapato.braa.AMN CnC traffic |
rev 2 |
2013-11-20 |
| snort |
ET EXPLOIT JavaX Toolkit Posting Plugin-Detect Data |
rev 3 |
2013-11-20 |
| snort |
ET WEB_SERVER WEBSHELL pwn.jsp shell |
rev 3 |
2013-11-20 |
| snort |
ET TROJAN Sisproc update |
rev 4 |
2013-11-16 |
| snort |
ET TROJAN Trojan.BlackRev Download Executable |
rev 4 |
2013-11-15 |
| snort |
ET TROJAN PWS Win32/Lmir.BMQ checkin |
rev 2 |
2013-11-15 |
| snort |
ET TROJAN Bamital checkin |
rev 2 |
2013-11-15 |
| snort |
ET TROJAN Possible Stitur Secondary Download |
rev 2 |
2013-11-09 |
| snort |
ET TROJAN FaceBook IM & Web Driven Facebook Trojan Posting Data |
rev 4 |
2013-11-08 |
| snort |
ET TROJAN Possible Schneebly Posting ScreenShot |
rev 1 |
2013-11-07 |
| snort |
ET CURRENT_EVENTS SUSPICIOUS Word DOCX with Many ActiveX Objects and Media |
rev 6 |
2013-11-07 |
| snort |
ET TROJAN W32/Citadel.Arx Variant CnC Beacon 1 |
rev 1 |
2013-11-07 |
| snort |
ET TROJAN W32/Citadel.Arx Varient CnC Beacon 2 |
rev 1 |
2013-11-07 |
| snort |
ET TROJAN Possible Backdoor.Adwind Download |
rev 3 |
2013-11-06 |
| snort |
ET CURRENT_EVENTS SUSPICIOUS connhost.exe in URI Probable Process Dump/Trojan Download |
rev 1 |
2013-11-06 |
| snort |
ET CURRENT_EVENTS SUSPICIOUS mssrs.exe in URI Probable Process Dump/Trojan Download |
rev 1 |
2013-11-06 |
| snort |
ET CURRENT_EVENTS SUSPICIOUS winlog.exe in URI Probable Process Dump/Trojan Download |
rev 1 |
2013-11-06 |
| snort |
ET CURRENT_EVENTS SUSPICIOUS winhosts.exe in URI Probable Process Dump/Trojan Download |
rev 1 |
2013-11-06 |
| snort |
ET CURRENT_EVENTS SUSPICIOUS lgfxsrvc.exe in URI Probable Process Dump/Trojan Download |
rev 1 |
2013-11-06 |
| snort |
ET CURRENT_EVENTS SUSPICIOUS waulct.exe in URI Probable Process Dump/Trojan Download |
rev 1 |
2013-11-06 |
| snort |
ET INFO Zip File |
rev 4 |
2013-11-06 |
| snort |
ET CURRENT_EVENTS SUSPICIOUS wsqmocn.exe in URI Probable Process Dump/Trojan Download |
rev 1 |
2013-11-06 |
| snort |
ET CURRENT_EVENTS SUSPICIOUS wimhost.exe in URI Probable Process Dump/Trojan Download |
rev 1 |
2013-11-06 |
| snort |
ET CURRENT_EVENTS SUSPICIOUS taskmgr.exe in URI Probable Process Dump/Trojan Download |
rev 1 |
2013-11-06 |
| snort |
ET CURRENT_EVENTS SUSPICIOUS msctcd.exe in URI Probable Process Dump/Trojan Download |
rev 1 |
2013-11-06 |
| snort |
ET CURRENT_EVENTS SUSPICIOUS alg.exe in URI Probable Process Dump/Trojan Download |
rev 1 |
2013-11-06 |
| snort |
ET TROJAN W32/Badur.Spy User Agent lawl |
rev 1 |
2013-11-01 |
| snort |
ET TROJAN FakeAV Install |
rev 1 |
2013-10-30 |
| snort |
ET INFO JAR Size Under 30K Size - Potentially Hostile |
rev 2 |
2013-10-28 |
| snort |
ET INFO Java File Sent With X-Powered By HTTP Header - Common In Exploit Kits |
rev 1 |
2013-10-28 |
| snort |
ET WEB_SERVER Possible Encrypted Webshell in POST |
rev 2 |
2013-10-28 |
| snort |
ET TROJAN Known Sinkhole Response Header |
rev 3 |
2013-10-23 |
| snort |
ET WEB_SPECIFIC_APPS WHMCS lt 5.2.8 SQL Injection |
rev 4 |
2013-10-21 |
| snort |
ET TROJAN Kuluoz Activity |
rev 2 |
2013-10-21 |
| snort |
ET SCAN NETWORK Outgoing Masscan detected |
rev 2 |
2013-10-18 |