The web for users, groups and offices. TWiki is an Enterprise Collaboration Platform. http://docs.emergingthreats.net/bin/view/Main Copyright 2008 Emerging Threats and Contributing Authors 2008-11-21T03:52:51Z http://docs.emergingthreats.net/bin/view/Main/RussianBusinessNetwork 2008-11-21T03:52:51Z

Emerging Threats Russian Business Network (RBN) Snort Intrusion Detection Rules : http://www.emergingthreats.net/rules/emerging rbn.rules http://www.emergingthreats ... (last changed by JamesMcQuaid)

JamesMcQuaid http://docs.emergingthreats.net/bin/view/Main/2008769 2008-11-19T22:45:22Z

alert tcp $EXTERNAL NET 3000:8000 $HOME NET any (msg:"ET POLICY Unknown Trojan P2P Initial Checkin Response"; flow:established,from server; dsize: Added 2008 11 ... (last changed by TWikiGuest)

TWikiGuest http://docs.emergingthreats.net/bin/view/Main/2008768 2008-11-19T22:45:22Z

alert tcp $HOME NET any $EXTERNAL NET 3000:8000 (msg:"ET POLICY Unknown Trojan P2P Initial Checkin"; flow:established,to server; dsize: Added 2008 11 19 17:45:22 ... (last changed by TWikiGuest)

TWikiGuest http://docs.emergingthreats.net/bin/view/Main/2008772 2008-11-19T22:45:22Z

alert tcp $HOME NET any $EXTERNAL NET 3000:8000 (msg:"ET POLICY Unknown Trojan P2P Request"; flow:established,to server; dsize: Added 2008 11 19 17:45:22 UTC ... (last changed by TWikiGuest)

TWikiGuest http://docs.emergingthreats.net/bin/view/Main/2008770 2008-11-19T22:45:22Z

alert tcp $EXTERNAL NET 3000:8000 $HOME NET any (msg:"ET POLICY Unknown Trojan P2P Data Download"; flow:established,from server; dsize: 1000; content:" 00 00 00 ... (last changed by TWikiGuest)

TWikiGuest http://docs.emergingthreats.net/bin/view/Main/2008771 2008-11-19T22:45:22Z

alert tcp $HOME NET any $EXTERNAL NET 3000:8000 (msg:"ET POLICY Unknown Trojan P2P Download Request"; flow:established,to server; dsize: Added 2008 11 19 17:45 ... (last changed by TWikiGuest)

TWikiGuest http://docs.emergingthreats.net/bin/view/Main/2008780 2008-11-19T20:45:23Z

alert tcp $EXTERNAL NET 1024: $HOME NET any (msg:"ET CURRENT EVENTS Unknown Keepalive in"; flow:established,to client; dsize:5; content:" 17 24 1B 00 00 "; flowbits ... (last changed by TWikiGuest)

TWikiGuest http://docs.emergingthreats.net/bin/view/Main/2008779 2008-11-19T20:45:23Z

alert tcp $HOME NET any $EXTERNAL NET 1024: (msg:"ET CURRENT EVENTS Unknown Keepalive out"; flow:established,to server; dsize:5; content:" 17 24 1B 00 00 "; flowbits ... (last changed by TWikiGuest)

TWikiGuest http://docs.emergingthreats.net/bin/view/Main/2008795 2008-11-19T20:45:23Z

alert tcp $EXTERNAL NET 5938 $HOME NET any (msg:"ET POLICY TeamViewier Keep alive inbound"; flow:established,to client; dsize:5; content:" 17 24 1B 00 00 "; flowbits ... (last changed by TWikiGuest)

TWikiGuest http://docs.emergingthreats.net/bin/view/Main/2008794 2008-11-19T20:45:23Z

alert tcp $HOME NET any $EXTERNAL NET 5938 (msg:"ET POLICY TeamViewier Keep alive outbound"; flow:established,to server; dsize:5; content:" 17 24 1B 00 00 "; flowbits ... (last changed by TWikiGuest)

TWikiGuest http://docs.emergingthreats.net/bin/view/Main/K0L4u 2008-11-19T12:24:14Z

My Links .ATasteOfTWiki view a short introductory presentation on TWiki for beginners .WelcomeGuest starting points on TWiki .TWikiUsersGuide ... (last changed by TWikiRegistrationAgent)

TWikiRegistrationAgent http://docs.emergingthreats.net/bin/view/Main/2008781 2008-11-18T17:15:22Z

alert tcp $HOME NET any $EXTERNAL NET $HTTP PORTS (msg:"ET POLICY Set flow on rar file get"; flow:established,to server; content:"GET "; depth:4; uricontent:".rar ... (last changed by TWikiGuest)

TWikiGuest http://docs.emergingthreats.net/bin/view/Main/2008791 2008-11-18T14:30:22Z

alert tcp $EXTERNAL NET $HTTP PORTS $HOME NET any (msg:"ET WEB SPECIFIC Visagesoft eXPert PDF Viewer ActiveX Control Arbitrary File Overwrite"; flow:to client,established ... (last changed by TWikiGuest)

TWikiGuest http://docs.emergingthreats.net/bin/view/Main/2008792 2008-11-18T14:30:22Z

alert tcp $EXTERNAL NET $HTTP PORTS $HOME NET any (msg:"ET EXPLOIT Microsoft DebugDiag CrashHangExt.dll ActiveX Control Remote Denial of Service"; flow:to client ... (last changed by TWikiGuest)

TWikiGuest http://docs.emergingthreats.net/bin/view/Main/2008785 2008-11-18T14:30:22Z

alert tcp $EXTERNAL NET any $HTTP SERVERS $HTTP PORTS (msg:"ET WEB SPECIFIC Aj Square RSS Reader url SQL Injection"; flow:established,to server; content:"GET " ... (last changed by TWikiGuest)

TWikiGuest http://docs.emergingthreats.net/bin/view/Main/2008787 2008-11-18T14:30:22Z

alert tcp $EXTERNAL NET any $HTTP SERVERS $HTTP PORTS (msg:"ET WEB SPECIFIC All In One Control Panel poll id parameter SQL Injection"; flow:to server,established ... (last changed by TWikiGuest)

TWikiGuest