Rule History

alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET EXPLOIT_KIT RedKit Exploit Kit Java Request to Recent jar (2)"; flow:established,to_server; flowbits:set,et.exploitkitlanding; http.uri; content:"/887.jar"; fast_pattern; http.user_agent; content:"|29 20|Java/"; classtype:exploit-kit; sid:2015929; rev:5; metadata:created_at 2012_11_27, signature_severity Major, updated_at 2024_03_03;)