ET INFO Suspicious Large HTTP Header Key Observed - Possible Exploit Activity
Sourceet/open
Fileemerging-info.rules
CreatedJanuary 13, 2023
UpdatedMarch 8, 2024
Classificationmisc-activity
alert http any any -> [$HOME_NET,$HTTP_SERVERS] any (msg:"ET INFO Suspicious Large HTTP Header Key Observed - Possible Exploit Activity"; flow:established,to_server ; http.header; pcre:"/^[^\x3a]{400,}/m" ; classtype:misc-activity; sid:2043304; rev:2; metadata:created_at 2023_01_13, deprecation_reason Performance, performance_impact Significant, confidence Medium, signature_severity Informational, tag possible_exploitation, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2024_03_08;)
Metadata
created at2023_01_13
deprecation reasonPerformance
performance impactSignificant
confidenceMedium
signature severityInformational
tagDescription_Generated_By_Proofpoint_Nexus
updated at2024_03_08
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!