sigs/CURRENT_EVENTS/

Individual rules are under Sigs, rulesets under Rules.

Current directory: [Emerging Threats] / sigs / CURRENT_EVENTS


File Rev. Age Author Last log entry
[BACK] Parent Directory        
[DIR] Attic/ [show]        
[TXT] CURRENT_Adobe[GRAPH] 1.26 6 weeks jonkman 2011673 2011674 2011675: new
[TXT] CURRENT_AntivirusDoktor2009[GRAPH] 1.1 6 months jonkman 2010675 2010676 2010677 2010678 2010679 2010680 2010681: new
[TXT] CURRENT_Asprox[GRAPH] 1.14 9 months fknobbe SIDs 2010032 2010033 2010034: Scripted addition of Wiki and/or CVSweb references...
[TXT] CURRENT_Bind[GRAPH] 1.15 4 months jonkman 2010909 2010910 2010911 2010912 2010913 2010914 2010915 2010916 2010918 2010919 ...
[TXT] CURRENT_Cisco[GRAPH] 1.8 2 days jonkman 2003634 2008899 2009513 2009653 2009654 2009656 2010092 2010093 2010094 2010095 ...
[TXT] CURRENT_DHL[GRAPH] 1.18 8 weeks jonkman 2002912 2002913 2002914 2002915 2002918 2002919 2002921 2002923 2002924 2011149 ...
[TXT] CURRENT_DNS_Poisoning[GRAPH] 1.23 6 months jonkman 2008446 2009488 2009489 2009492: cleanup
[TXT] CURRENT_FakeAV[GRAPH] 1.11 2 weeks jonkman 2011194 2011220 2011760 2011761 2011762 2011763 2011764 2011765 2011766: new
[TXT] CURRENT_Fakeav_Setup_dl[GRAPH] 1.4 4 months fknobbe SIDs 2010822 2010832 2010867 2010901: Removed superflous colon from pcre.
[TXT] CURRENT_FeeLCoMz[GRAPH] 1.4 7 weeks fknobbe SIDs 2010463: Changed erroneous 1024: to any for source side. (some devices NAT ...
[TXT] CURRENT_Foxit[GRAPH] 1.5 2 months jonkman 2010968: updated
[TXT] CURRENT_Hostile_Google_Fake_Domain[GRAPH] 1.3 4 months jonkman 2010866: typo
[TXT] CURRENT_IBM[GRAPH] 1.4 3 months fknobbe SID change. 20110068 -> 2011068. Also 69 and 70. Someone was getting ahead of hi...
[TXT] CURRENT_Ikee[GRAPH] 1.2 7 months jonkman 2010545 2010546 2010547 2010548 2010549 2010550 2010551 2010552: new
[TXT] CURRENT_Java[GRAPH] 1.9 2 weeks jonkman 2011194 2011220 2011760 2011761 2011762 2011763 2011764 2011765 2011766: new
[TXT] CURRENT_Java_Webdav[GRAPH] 1.2 3 months jonkman 2010974 2011009 2011010 2011017 2011018 2011021 2011022 2011023 2011024 2011025 ...
[TXT] CURRENT_Lnk[GRAPH] 1.2 2 days jonkman 2011239: typo
[TXT] CURRENT_MSIE[GRAPH] 1.21 4 weeks jonkman 2000040 2000562 2001046 2001047 2001048 2001056 2001057 2001066 2001099 2001101 ...
[TXT] CURRENT_MSSQL[GRAPH] 1.2 17 months fknobbe SIDs 2008909 2008910: Scripted addition of Wiki and/or CVSweb references.
[TXT] CURRENT_MSVidCtl[GRAPH] 1.12 6 months jonkman 2008446 2009488 2009489 2009492: cleanup
[TXT] CURRENT_MS_SMB_DOS[GRAPH] 1.5 10 months jonkman 2009886: typo
[TXT] CURRENT_MS_Snapshot[GRAPH] 1.2 17 months fknobbe SIDs 2008407 2008408 2008409: Scripted addition of Wiki and/or CVSweb references...
[TXT] CURRENT_Malvertising[GRAPH] 1.8 5 days jonkman 2011175 2011176 2011230 2011231 2011232 2011233 2011234 2011235 2011236 2011237 ...
[TXT] CURRENT_Malwareurl_top_downloads[GRAPH] 1.33 2 months fknobbe SID 2010054: Changed codex.exe to codec.exe in title.
[TXT] CURRENT_Mass_File_Injections[GRAPH] 1.3 17 months fknobbe SIDs 2008206 2008207: Scripted addition of Wiki and/or CVSweb references.
[TXT] CURRENT_Nacha[GRAPH] 1.3 8 months fknobbe SID 2010342: Escaped colon in PCRE.
[TXT] CURRENT_Neosploit[GRAPH] 1.4 4 months fknobbe SIDs 2010870 2010871: Fixed bad escape in content.
[TXT] CURRENT_Nod32[GRAPH] 1.4 6 weeks jonkman 2011173 2011669 2011670 2011671 2011672: new
[TXT] CURRENT_Pinkslipbot[GRAPH] 1.2 6 months jonkman 2010728 2010729 2010730 2010731 2010732 2010733 2010734 2010735 2010736 2010737 ...
[TXT] CURRENT_Possible_Malicious_PDF[GRAPH] 1.6 5 days jonkman 2009076 2010881 2011241 2011242: new
[TXT] CURRENT_Psybot[GRAPH] 1.3 16 months fknobbe SIDs 2009170 2009171 2009172: Scripted addition of Wiki and/or CVSweb references...
[TXT] CURRENT_Rusibank.com[GRAPH] 1.4 17 months fknobbe SIDs 2009092: Scripted addition of Wiki and/or CVSweb references.
[TXT] CURRENT_SEO_FakeAV[GRAPH] 1.1 3 months jonkman 20110055 20110056 2011026 2011064: new
[TXT] CURRENT_SQL_Injections[GRAPH] 1.17 2 months jonkman 2008373: disabling
[TXT] CURRENT_Skype[GRAPH] 1.4 4 weeks fknobbe SIDs 2011680: Added missing flow.
[TXT] CURRENT_Unknown_trojan[GRAPH] 1.14 16 months fknobbe SIDs 2001621 2001810 2001621 2001751 2001810 2002129 2002130 2002131 2002132 200...
[TXT] CURRENT_Unknown_trojan3[GRAPH] 1.4 17 months fknobbe SIDs 2008779 2008780: Scripted addition of Wiki and/or CVSweb references.
[TXT] CURRENT_WinHelp[GRAPH] 1.5 11 days jonkman 2011173: reverted
[TXT] CURRENT_Wordpress[GRAPH] 1.2 2 weeks jonkman 2011194 2011220 2011760 2011761 2011762 2011763 2011764 2011765 2011766: new
[TXT] CURRENT_Zeus[GRAPH] 1.9 2 months jonkman 2003055 2009883 2010228 2010337 2010384 2010573 2010584 2010810 2010811 2010812 ...
[TXT] CURRENT_fakealerts[GRAPH] 1.5 8 months fknobbe SIDs 2010231 2010232 2010233 2010234 2010235 2010236 2010237 2010238 2010239: Fi...
[TXT] CURRENT_santa-inbox.com[GRAPH] 1.2 17 months fknobbe SIDs 2008531: Scripted addition of Wiki and/or CVSweb references.


Download this directory in tarball or zip archive
General options
,

Emerging Threats Rulesets <threats@emergingthreats.net>