Topics tagged etopen

Topic	Replies	Views	Activity
Why ET rules used hex bytes instead of the original characters? Rule Signatures suricata , etopen	4	77	August 24, 2026
SIG:ET HUNTING Possible Sliver Age and Minisign Key Material in Internal TCP Stream Rule Signatures etopen , suricata	0	94	June 10, 2026
SIG: EarthWorm Reverse SOCKS Handshake and Tunnel Sequence Detection Rule Signatures etopen , suricata	6	254	May 27, 2026
SIG: BPFDoor icmpShell ICMP artifacts from Rapid7 whitepaper Rule Signatures etopen , suricata	12	1047	May 14, 2026
SIG: Suspicious File Delivery from Cloudflare Family Host Rule Signatures etopen , suricata	7	263	April 10, 2026
SIGS: PoC for Axios NPM package supply chain compromise Rule Signatures malware , etopen , suricata	3	162	April 1, 2026
Bug in emerging-ciarmy.rules? Feedback & Support etopen	4	103	December 4, 2025
False family: renaming rules from Lumma stealer to GCleaner loader Rule Signatures false-positives , etopen	1	138	September 8, 2025
ET MALWARE Specter Insight Beacon CnC Checkin; sid: 2061025 Rule Signatures etopen	2	251	April 14, 2025
PCRE in Sitecore CMS CSRFTOKEN Deserialization sid:2061119 for CVE-2019-9874 Rule Signatures feedback , etopen , suricata	1	181	March 27, 2025
When loading rules for SID 2060960, 2060961, the message 'fast_pattern is ineffective with base64_data' occurs Rule Signatures etopen , suricata	1	127	March 25, 2025
ET WEB_SERVER Next.js CVE-2025-29927 middleware bypass attempt Rule Signatures etopen	1	153	March 24, 2025
Zyxel runCommandInShell Telnet Service - rule id 2060323 Rule Signatures etopen , false-positives	0	85	February 25, 2025
Sid:2055984 Ivanti Cloud Service Appliance Authenticated Command Injection (CVE-2024-8190) Rule Signatures etopen	1	190	October 1, 2024
PigButcher Credential Phish Landing Page Rules Error on Suricata 7 Feedback & Support etopen	6	193	September 9, 2024
NMAP ruleset are FP? Rule Signatures false-positives , etopen	1	187	September 5, 2024
DiamotrixClipper Rule Signatures etopen , suricata	2	368	August 30, 2024
NjRAT variant - tXRAT v.2.3R Rule Signatures etopen , suricata	1	244	June 21, 2024
ET MALWARE Generic Request to gate.php Dotted-Quad - Rule ID 2022986 Rule Signatures rule-analysis , etopen	1	400	January 29, 2024
IDS and IPS rules on LAN Rule Signatures configuration , config , suricata , etopen	1	709	January 22, 2024
Independant System Verification and Validation of Malware Rule Signatures etopen	2	254	December 28, 2023
Addressing an FP: 2016950 - ET MALWARE Possible Win32/Hupigon ip.txt with a Non-Mozilla UA Rule Signatures etopen , false-positives , rule-analysis	0	264	October 2, 2023
Possible FP - JA3 Hash - [Abuse.ch] Possible Adware Rule Signatures etopen	1	418	August 1, 2023
Possible FP: ET JA3 Hash - [Abuse.ch] Possible Adwind Feedback & Support etopen	3	840	July 14, 2023
Possible FP: ET MALWARE Sourtoff Receiving Simda Payload Rule Signatures etopen	4	446	July 7, 2023
GoodMorning Ransomware Rule Signatures etopen	7	561	June 23, 2023
Licensing: Is the Compromised-IPs list also 'Open'? Feedback & Support etopen	1	412	June 20, 2023
New Signature: MalDoc/Gamaredon CnC Activity Rule Signatures etopen	1	242	May 19, 2023
Need a feedback about Kerio Control rule that's blocking the web, domen, even application Rule Signatures etopen	3	428	May 1, 2023
Snort3, Snort2lua, and the Emerging Threats Snort 2.9 ruleset Show and Tell snort3 , snort2lua , etopen , etpro	2	4222	April 14, 2023