#alert ip any any -> any any (msg:"ET POLICY SSN Detected in Clear Text (SSN )"; pcre:"/SSN ([0-6]\d\d|7[0-256]\d|73[0-3]|77[0-2])\d{6} /"; classtype: policy-violation; sid: 2007941; rev:1;)

Added 2008-03-10 00:19:25 UTC

alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"ET MALWARE Invalid HTTP GET Request - Often Malware Related"; flow:established,to_server; content:"GET http|3a 2f 2f|"; depth:11; classtype:non-standard-protocol; reference:url,doc.emergingthreats.net/2007941; sid:2007941; rev:2;)

Added 2008-03-07 17:39:16 UTC