Rule History

alert smtp $HOME_NET any -> $EXTERNAL_NET any (msg:"ET HUNTING Possible Covid19 Themed Email Spam Outbound M6"; flow:to_server,established; content:"sars-cov-2"; nocase; fast_pattern; threshold:type threshold, count 5, seconds 120, track by_src; classtype:bad-unknown; sid:2029781; rev:2; metadata:created_at 2020_03_31, confidence Medium, signature_severity Minor, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2020_03_31;)