Ruleset Update Summary - 2024/11/30 - v10763

Ruleset Updates
1

Summary:

0 new OPEN, 0 new PRO (0 + 0)

Modified inactive rules:

  • 2003230 - ET WEB_CLIENT Microsoft IE FTP URL Arbitrary Command Injection (web_client.rules)
  • 2013237 - ET EXPLOIT_KIT Obfuscated Javascript Often Used in Drivebys (exploit_kit.rules)
  • 2027190 - ET NETBIOS DCERPC DCOM ShellExecute - Likely Lateral Movement (netbios.rules)
  • 2815238 - ETPRO PHISHING Base64 Obfuscated Phishing Landing Dec 8 (phishing.rules)

Disabled and modified rules:

  • 2034575 - ET EXPLOIT Possible Edgewater Networks Edgemarc Blind Command Injection Attempt (CVE-2017-6079) (exploit.rules)