# Ruleset Update Summary - 2026/10/30 - v11324

**URL:** <https://community.emergingthreats.net/t/ruleset-update-summary-2026-10-30-v11324/3496>\
**Category:** Ruleset Updates\
**Created:** [October 30, 2026, 8:52pm UTC](https://community.emergingthreats.net/t/ruleset-update-summary-2026-10-30-v11324/3496 "2026-10-30T20:52:08Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![rulesbot](https://avatars.discourse-cdn.com/v4/letter/r/13edae/32.png) [@rulesbot](https://community.emergingthreats.net/u/rulesbot)\
**Post date:** [October 30, 2026, 8:52pm UTC](https://community.emergingthreats.net/t/ruleset-update-summary-2026-10-30-v11324/3496/1 "2026-10-30T20:52:08Z")

</div>

## Summary:

4 new OPEN, 12 new PRO (4 + 8)

* * *

## Added rules:

### Open:

- 2072608 - ET MALWARE RedHive CnC Victim Registration M1 (malware.rules)
- 2072609 - ET MALWARE RedHive CnC Screenshot Exfil (malware.rules)
- 2072610 - ET MALWARE RedHive CnC Victim Registration M2 (malware.rules)
- 2072611 - ET INFO Outbound Static Websocket Key Nonce Used, Not Randomly Generated (info.rules)

### Pro:

- 2868997 - ETPRO MALWARE Hermes MaaS Victim Client Report (malware.rules)
- 2868998 - ETPRO MALWARE Hermes MaaS CnC Client Report Response (malware.rules)
- 2868999 - ETPRO MALWARE Hermes MaaS CnC Manifest Request (malware.rules)
- 2869000 - ETPRO MALWARE Hermes MaaS CnC Manifest Response (malware.rules)
- 2869001 - ETPRO MALWARE Hermes MaaS GET Binary Chunk (malware.rules)
- 2869002 - ETPRO MALWARE Hermes MaaS Custom HTTP Header Observed Inbound (malware.rules)
- 2869003 - ETPRO MALWARE Hermes MaaS Custom HTTP Header Observed Outbound (malware.rules)
- 2869004 - ETPRO MALWARE Hermes Victim Retrieve Modules Request (malware.rules)