Rule History

alert http $EXTERNAL_NET any -> $HOME_NET any (msg:"ET ADWARE_PUP Inbound AlphaServer User-Agent (Powered By 64-Bit Alpha Processor)"; flow:established,to_server; http.user_agent; bsize:115; content:"Mozilla/4.0 (compatible|3b| MSIE 4.01|3b| Digital AlphaServer 1000A 4/233|3b| Windows NT|3b| Powered By 64-Bit Alpha Processor)"; fast_pattern; nocase; classtype:pup-activity; sid:2011517; rev:5; metadata:created_at 2010_09_27, confidence High, signature_severity Minor, updated_at 2024_03_02;)