# Ruleset Update Summary - 2023/09/21 - v10422

**URL:** <https://community.emergingthreats.net/t/ruleset-update-summary-2023-09-21-v10422/976>\
**Category:** Ruleset Updates\
**Created:** [September 21, 2023, 8:54pm UTC](https://community.emergingthreats.net/t/ruleset-update-summary-2023-09-21-v10422/976 "2023-09-21T20:54:07Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![rulesbot](https://avatars.discourse-cdn.com/v4/letter/r/13edae/32.png) [@rulesbot](https://community.emergingthreats.net/u/rulesbot)\
**Post date:** [September 21, 2023, 8:54pm UTC](https://community.emergingthreats.net/t/ruleset-update-summary-2023-09-21-v10422/976/1 "2023-09-21T20:54:07Z")

</div>

## Summary:

6 new OPEN, 7 new PRO (6 + 1)

Thanks @Vectra\_AI

* * *

## Added rules:

### Open:

- 2036627 - ET INFO ScreenConnect/ConnectWise Initial Checkin Packet M1 (info.rules)
- 2048051 - ET INFO ScreenConnect/ConnectWise Initial Checkin Packet M2 (info.rules)
- 2048143 - ET INFO ScreenConnect/ConnectWise Initial Checkin Packet M3 (info.rules)
- 2048144 - ET PHISHING TOAD CnC Domain in DNS Lookup (eshopper .top) (phishing.rules)
- 2048145 - ET PHISHING Observed TOAD Domain (eshopper .top in TLS SNI) (phishing.rules)
- 2048146 - ET EXPLOIT Possible Barracuda Email Security Gateway Remote Code Execution Attempt (CVE-2023-2868) M2 (exploit.rules)

### Pro:

- 2839081 - ETPRO INFO External IP Lookup - myip ipip .net (info.rules)

* * *

## Removed rules:

- 2036627 - ET POLICY ScreenConnect-ConnectWise Initial Checkin Packet M1 (policy.rules)
- 2048051 - ET POLICY ScreenConnect-ConnectWise Initial Checkin Packet M2 (policy.rules)
- 2839081 - ETPRO POLICY External IP Lookup - myip ipip .net (policy.rules)
