|
False positive for 2067921 ET MALWARE PureLogs Stealer CnC ping Request
|
|
2
|
105
|
February 27, 2026
|
|
Potential False Positive for 2009099 being triggered by Aurora iOS app to AWS IP Addresses
|
|
1
|
19
|
February 23, 2026
|
|
Are Google LLC IPs flagged as malicious really worth investigating?
|
|
2
|
30
|
February 18, 2026
|
|
Bug: SID 2064326 has severity:1 but is labeled "ET INFO"
|
|
4
|
51
|
January 21, 2026
|
|
2010677 ET MALWARE Suspicious User-Agent (My Session)
|
|
4
|
76
|
December 5, 2025
|
|
Suricata not detecting attacks using emerging threats
|
|
0
|
124
|
November 4, 2025
|
|
False Positive 2065016 ET TROJAN BPFDoor Heartbeat (Outbound)
|
|
2
|
189
|
October 6, 2025
|
|
False family: renaming rules from Lumma stealer to GCleaner loader
|
|
1
|
91
|
September 8, 2025
|
|
Zyxel runCommandInShell Telnet Service - rule id 2060323
|
|
0
|
57
|
February 25, 2025
|
|
NMAP ruleset are FP?
|
|
1
|
149
|
September 5, 2024
|
|
FP on 2856495 - "ETPRO HUNTING If-Unmodified-Since Header with Microsoft BITS User-Agent"
|
|
1
|
182
|
March 27, 2024
|
|
SID 2012870 - Outbound Request contains pw
|
|
2
|
376
|
December 19, 2023
|
|
False positive on Android Trojan
|
|
1
|
340
|
October 19, 2023
|
|
Handling False Positive Reports as A Rule Writer! Special Guests: PCREs, Dalton, Dalton’s Flowsynth
|
|
11
|
612
|
October 12, 2023
|
|
Addressing an FP: 2016950 - ET MALWARE Possible Win32/Hupigon ip.txt with a Non-Mozilla UA
|
|
0
|
250
|
October 2, 2023
|