Back to Rule

Rule History

SID: 2027200 • Source: et/open

Versions (4)

Version DetailsCurrent

Rev: 5Apr 15, 2019, 12:00 PM

ET INFO Observed SSL Cert (URL Shortener Service - tiny .cc)

alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"ET INFO Observed SSL Cert (URL Shortener Service - tiny .cc)"; flow:from_server,established; tls.cert_subject; content:"CN=tiny.cc"; nocase; endswith; tls.cert_issuer; content:"C=US, O=Let's Encrypt, CN=Let's Encrypt Authority X3"; classtype:misc-activity; sid:2027200; rev:5; metadata:created_at 2019_04_15, confidence High, signature_severity Informational, tag URL_Shortener_Service, updated_at 2023_04_28;)

Apr 15, 2019, 12:00 PM

Apr 28, 2023, 12:00 PM

Sep 21, 2024, 3:00 AM

May 30, 2025, 12:04 AM

rules/emerging-info.rules