Versions (3)
Version DetailsCurrent
Rev: 4 • Feb 6, 2017, 12:00 PMET POLICY DNS Query to Hamas Terrorist Propaganda TV Channel (aqsatv .ps)
alert dns $HOME_NET any -> any 53 (msg:"ET POLICY DNS Query to Hamas Terrorist Propaganda TV Channel (aqsatv .ps)"; dns.query; content:"|06|aqsatv|02|ps|00|"; nocase; reference:url,nctc.gov/site/groups/hamas.html; classtype:policy-violation; sid:2023873; rev:4; metadata:attack_target Client_Endpoint, created_at 2017_02_06, deployment Perimeter, performance_impact Low, confidence Medium, signature_severity Informational, updated_at 2024_03_26;)
Feb 6, 2017, 12:00 PM
Mar 26, 2024, 12:00 PM
Sep 21, 2024, 3:00 AM
May 30, 2025, 12:04 AM
rules/emerging-policy.rules