Back to Rule

Rule History

SID: 2015674 • Source: et/open

Versions (4)

Version DetailsCurrent

Rev: 7Sep 5, 2012, 12:00 PM

ET INFO 3XX redirect to data URL

alert http $EXTERNAL_NET any -> $HOME_NET any (msg:"ET INFO 3XX redirect to data URL"; flow:established,to_client; http.stat_code; content:"3"; depth:1; http.location; content:"data|3a|"; fast_pattern; depth:5; classtype:misc-activity; sid:2015674; rev:7; metadata:attack_target Client_Endpoint, created_at 2012_09_05, deployment Perimeter, confidence High, signature_severity Minor, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2024_01_22, reviewed_at 2024_03_25; target:dest_ip;)

Sep 5, 2012, 12:00 PM

Jan 22, 2024, 12:00 PM

Sep 21, 2024, 3:00 AM

Nov 3, 2025, 10:34 PM

rules/emerging-info.rules