| snort |
GPL NETBIOS xp_reg* - registry access |
rev 11 |
2012-09-12 |
| snort |
GPL SQL MSSQL shellcode attempt 2 |
rev 7 |
2012-09-12 |
| snort |
GPL WEB_SERVER service.pwd |
rev 8 |
2012-09-12 |
| snort |
GPL SQL shellcode attempt |
rev 7 |
2012-09-12 |
| snort |
GPL NETBIOS xp_reg* registry access |
rev 12 |
2012-09-12 |
| snort |
GPL NETBIOS SMB NTLMSSP invalid mechlistMIC attempt |
rev 11 |
2012-09-12 |
| snort |
GPL WEB_SERVER /scripts/iisadmin/default.htm access |
rev 9 |
2012-09-12 |
| snort |
GPL NETBIOS SMB-DS DCERPC ISystemActivator unicode bind attempt |
rev 8 |
2012-09-12 |
| snort |
GPL SQL sa login failed |
rev 11 |
2012-09-12 |
| snort |
GPL SQL sp_password - password change |
rev 6 |
2012-09-12 |
| snort |
GPL NETBIOS SMB-DS DCEPRC ORPCThis request flood attempt |
rev 9 |
2012-09-12 |
| snort |
GPL WEB_SERVER author.exe access |
rev 8 |
2012-09-12 |
| snort |
GPL WEB_SERVER service.cnf access |
rev 11 |
2012-09-12 |
| snort |
GPL WEB_SERVER global.asa access |
rev 14 |
2012-09-12 |
| snort |
GPL SHELLCODE MSSQL shellcode attempt |
rev 8 |
2012-09-12 |
| snort |
GPL IMAP append overflow attempt |
rev 3 |
2012-09-12 |
| snort |
GPL WEB_SERVER writeto.cnf access |
rev 11 |
2012-09-12 |
| snort |
GPL SHELLCODE x86 0xEB0C NOOP |
rev 8 |
2012-09-12 |
| snort |
GPL NETBIOS SMB-DS DCERPC NTLMSSP invalid mechlistMIC attempt |
rev 12 |
2012-09-12 |
| snort |
GPL IMAP subscribe literal overflow attempt |
rev 3 |
2012-09-12 |
| snort |
ET CURRENT_EVENTS NeoSploit - Version Enumerated - Java |
rev 1 |
2012-09-11 |
| snort |
ET TROJAN Tatanga/Win32.Kexject.A Checkin |
rev 4 |
2012-09-10 |
| snort |
ET POLICY Inbound /uploadify.php Access |
rev 1 |
2012-09-08 |
| snort |
ET POLICY Signed TLS Certificate with md5WithRSAEncryption |
rev 2 |
2012-09-08 |
| snort |
ET CURRENT_EVENTS Probable Sakura exploit kit landing page with obfuscated URLs |
rev 1 |
2012-09-06 |
| snort |
ET INFO WinUpack Modified PE Header Outbound |
rev 6 |
2012-09-01 |
| snort |
ET INFO WinUpack Modified PE Header Inbound |
rev 6 |
2012-09-01 |
| snort |
GPL CHAT Yahoo Messenger File Transfer Receive Request |
rev 5 |
2012-09-01 |
| snort |
ET TROJAN Shady RAT Retrieve and Execute Command |
rev 2 |
2012-08-31 |
| snort |
ET TROJAN Shady RAT Get File Command |
rev 2 |
2012-08-31 |
| snort |
ET TROJAN Shady RAT Relay Command |
rev 2 |
2012-08-31 |
| snort |
ET TROJAN Shady RAT Put File Command |
rev 2 |
2012-08-31 |
| snort |
ET TROJAN Shady RAT Send Status Result |
rev 2 |
2012-08-31 |
| snort |
ET TROJAN Mac Flashback Checkin 2 |
rev 7 |
2012-08-31 |
| snort |
ET TROJAN Trojan.JS.QLP Checkin |
rev 2 |
2012-08-30 |
| snort |
ET CURRENT_EVENTS Likely TDS redirecting to exploit kit |
rev 3 |
2012-08-29 |
| snort |
ET TROJAN Tibs/Harnig Downloader Activity |
rev 6 |
2012-08-24 |
| snort |
GPL SHELLCODE HP-UX NOOP |
rev 8 |
2012-08-21 |
| snort |
GPL SHELLCODE sparc NOOP |
rev 7 |
2012-08-21 |
| snort |
GPL SHELLCODE SGI NOOP |
rev 7 |
2012-08-21 |