Topics tagged etopen

Topic	Replies	Views	Activity
Why ET rules used hex bytes instead of the original characters? Rule Signatures suricata , etopen	0	5	August 19, 2026
SIG:ET HUNTING Possible Sliver Age and Minisign Key Material in Internal TCP Stream Rule Signatures etopen , suricata	0	84	June 10, 2026
SIG: EarthWorm Reverse SOCKS Handshake and Tunnel Sequence Detection Rule Signatures etopen , suricata	6	233	May 27, 2026
SIG: BPFDoor icmpShell ICMP artifacts from Rapid7 whitepaper Rule Signatures etopen , suricata	12	1010	May 14, 2026
SIG: Suspicious File Delivery from Cloudflare Family Host Rule Signatures etopen , suricata	7	251	April 10, 2026
SIGS: PoC for Axios NPM package supply chain compromise Rule Signatures malware , etopen , suricata	3	148	April 1, 2026
Bug in emerging-ciarmy.rules? Feedback & Support etopen	4	102	December 4, 2025
False family: renaming rules from Lumma stealer to GCleaner loader Rule Signatures false-positives , etopen	1	130	September 8, 2025
ET MALWARE Specter Insight Beacon CnC Checkin; sid: 2061025 Rule Signatures etopen	2	244	April 14, 2025
PCRE in Sitecore CMS CSRFTOKEN Deserialization sid:2061119 for CVE-2019-9874 Rule Signatures feedback , etopen , suricata	1	174	March 27, 2025
When loading rules for SID 2060960, 2060961, the message 'fast_pattern is ineffective with base64_data' occurs Rule Signatures etopen , suricata	1	123	March 25, 2025
ET WEB_SERVER Next.js CVE-2025-29927 middleware bypass attempt Rule Signatures etopen	1	149	March 24, 2025
Zyxel runCommandInShell Telnet Service - rule id 2060323 Rule Signatures etopen , false-positives	0	83	February 25, 2025
Sid:2055984 Ivanti Cloud Service Appliance Authenticated Command Injection (CVE-2024-8190) Rule Signatures etopen	1	185	October 1, 2024
PigButcher Credential Phish Landing Page Rules Error on Suricata 7 Feedback & Support etopen	6	170	September 9, 2024
NMAP ruleset are FP? Rule Signatures false-positives , etopen	1	182	September 5, 2024
DiamotrixClipper Rule Signatures etopen , suricata	2	359	August 30, 2024
NjRAT variant - tXRAT v.2.3R Rule Signatures etopen , suricata	1	243	June 21, 2024
ET MALWARE Generic Request to gate.php Dotted-Quad - Rule ID 2022986 Rule Signatures rule-analysis , etopen	1	396	January 29, 2024
IDS and IPS rules on LAN Rule Signatures configuration , config , suricata , etopen	1	701	January 22, 2024
Independant System Verification and Validation of Malware Rule Signatures etopen	2	244	December 28, 2023
Addressing an FP: 2016950 - ET MALWARE Possible Win32/Hupigon ip.txt with a Non-Mozilla UA Rule Signatures etopen , false-positives , rule-analysis	0	262	October 2, 2023
Possible FP - JA3 Hash - [Abuse.ch] Possible Adware Rule Signatures etopen	1	414	August 1, 2023
Possible FP: ET JA3 Hash - [Abuse.ch] Possible Adwind Feedback & Support etopen	3	822	July 14, 2023
Possible FP: ET MALWARE Sourtoff Receiving Simda Payload Rule Signatures etopen	4	431	July 7, 2023
GoodMorning Ransomware Rule Signatures etopen	7	549	June 23, 2023
Licensing: Is the Compromised-IPs list also 'Open'? Feedback & Support etopen	1	399	June 20, 2023
New Signature: MalDoc/Gamaredon CnC Activity Rule Signatures etopen	1	241	May 19, 2023
Need a feedback about Kerio Control rule that's blocking the web, domen, even application Rule Signatures etopen	3	418	May 1, 2023
Snort3, Snort2lua, and the Emerging Threats Snort 2.9 ruleset Show and Tell snort3 , snort2lua , etopen , etpro	2	4197	April 14, 2023