|
SID 2069172 Alerts on Benign Activity
|
|
1
|
62
|
May 8, 2026
|
|
False positive for 2067921 ET MALWARE PureLogs Stealer CnC ping Request
|
|
2
|
238
|
February 27, 2026
|
|
Potential False Positive for 2009099 being triggered by Aurora iOS app to AWS IP Addresses
|
|
1
|
36
|
February 23, 2026
|
|
Are Google LLC IPs flagged as malicious really worth investigating?
|
|
0
|
78
|
February 15, 2026
|
|
Bug: SID 2064326 has severity:1 but is labeled "ET INFO"
|
|
4
|
70
|
January 21, 2026
|
|
2010677 ET MALWARE Suspicious User-Agent (My Session)
|
|
4
|
94
|
December 5, 2025
|
|
Suricata not detecting attacks using emerging threats
|
|
0
|
153
|
November 4, 2025
|
|
False Positive 2065016 ET TROJAN BPFDoor Heartbeat (Outbound)
|
|
2
|
213
|
October 6, 2025
|
|
False family: renaming rules from Lumma stealer to GCleaner loader
|
|
1
|
104
|
September 8, 2025
|
|
Zyxel runCommandInShell Telnet Service - rule id 2060323
|
|
0
|
66
|
February 25, 2025
|
|
NMAP ruleset are FP?
|
|
1
|
160
|
September 5, 2024
|
|
FP on 2856495 - "ETPRO HUNTING If-Unmodified-Since Header with Microsoft BITS User-Agent"
|
|
1
|
189
|
March 27, 2024
|
|
SID 2012870 - Outbound Request contains pw
|
|
2
|
394
|
December 19, 2023
|
|
False positive on Android Trojan
|
|
1
|
353
|
October 19, 2023
|
|
Handling False Positive Reports as A Rule Writer! Special Guests: PCREs, Dalton, Dalton’s Flowsynth
|
|
11
|
687
|
October 12, 2023
|
|
Addressing an FP: 2016950 - ET MALWARE Possible Win32/Hupigon ip.txt with a Non-Mozilla UA
|
|
0
|
254
|
October 2, 2023
|