alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET USER_AGENTS Observed Suspicious User-Agent (inflammable)"; flow:established,to_server; http.user_agent; bsize:11; content:"inflammable"; fast_pattern; threshold:type limit,seconds 300,count 1,track by_src; reference:md5,adcaa63353083b81150d99bca3fc8752; classtype:misc-activity; sid:2049171; rev:2; metadata:attack_target Client_Endpoint, created_at 2023_11_14, deployment Perimeter, deployment SSLDecrypt, confidence High, signature_severity Informational, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2024_03_27;)