Topics tagged etopen

Topic	Replies	Views	Activity
SIG:ET HUNTING Possible Sliver Age and Minisign Key Material in Internal TCP Stream Rule Signatures etopen , suricata	0	57	June 10, 2026
SIG: EarthWorm Reverse SOCKS Handshake and Tunnel Sequence Detection Rule Signatures etopen , suricata	6	174	May 27, 2026
SIG: BPFDoor icmpShell ICMP artifacts from Rapid7 whitepaper Rule Signatures etopen , suricata	12	903	May 14, 2026
SIG: Suspicious File Delivery from Cloudflare Family Host Rule Signatures etopen , suricata	7	176	April 10, 2026
SIGS: PoC for Axios NPM package supply chain compromise Rule Signatures malware , etopen , suricata	3	117	April 1, 2026
Bug in emerging-ciarmy.rules? Feedback & Support etopen	4	69	December 4, 2025
False family: renaming rules from Lumma stealer to GCleaner loader Rule Signatures false-positives , etopen	1	112	September 8, 2025
ET MALWARE Specter Insight Beacon CnC Checkin; sid: 2061025 Rule Signatures etopen	2	225	April 14, 2025
PCRE in Sitecore CMS CSRFTOKEN Deserialization sid:2061119 for CVE-2019-9874 Rule Signatures feedback , etopen , suricata	1	150	March 27, 2025
When loading rules for SID 2060960, 2060961, the message 'fast_pattern is ineffective with base64_data' occurs Rule Signatures etopen , suricata	1	110	March 25, 2025
ET WEB_SERVER Next.js CVE-2025-29927 middleware bypass attempt Rule Signatures etopen	1	134	March 24, 2025
Zyxel runCommandInShell Telnet Service - rule id 2060323 Rule Signatures etopen , false-positives	0	70	February 25, 2025
Sid:2055984 Ivanti Cloud Service Appliance Authenticated Command Injection (CVE-2024-8190) Rule Signatures etopen	1	171	October 1, 2024
PigButcher Credential Phish Landing Page Rules Error on Suricata 7 Feedback & Support etopen	6	148	September 9, 2024
NMAP ruleset are FP? Rule Signatures false-positives , etopen	1	162	September 5, 2024
DiamotrixClipper Rule Signatures etopen , suricata	2	346	August 30, 2024
NjRAT variant - tXRAT v.2.3R Rule Signatures etopen , suricata	1	231	June 21, 2024
ET MALWARE Generic Request to gate.php Dotted-Quad - Rule ID 2022986 Rule Signatures rule-analysis , etopen	1	380	January 29, 2024
IDS and IPS rules on LAN Rule Signatures configuration , config , suricata , etopen	1	684	January 22, 2024
Independant System Verification and Validation of Malware Rule Signatures etopen	2	229	December 28, 2023
Addressing an FP: 2016950 - ET MALWARE Possible Win32/Hupigon ip.txt with a Non-Mozilla UA Rule Signatures etopen , false-positives , rule-analysis	0	256	October 2, 2023
Possible FP - JA3 Hash - [Abuse.ch] Possible Adware Rule Signatures etopen	1	393	August 1, 2023
Possible FP: ET JA3 Hash - [Abuse.ch] Possible Adwind Feedback & Support etopen	3	799	July 14, 2023
Possible FP: ET MALWARE Sourtoff Receiving Simda Payload Rule Signatures etopen	4	410	July 7, 2023
GoodMorning Ransomware Rule Signatures etopen	7	509	June 23, 2023
Licensing: Is the Compromised-IPs list also 'Open'? Feedback & Support etopen	1	386	June 20, 2023
New Signature: MalDoc/Gamaredon CnC Activity Rule Signatures etopen	1	225	May 19, 2023
Need a feedback about Kerio Control rule that's blocking the web, domen, even application Rule Signatures etopen	3	397	May 1, 2023
Snort3, Snort2lua, and the Emerging Threats Snort 2.9 ruleset Show and Tell snort3 , snort2lua , etopen , etpro	2	4147	April 14, 2023