ET INFO Excessive Number of SMB Session Requests in a short time frame

7.0.35.0SID: 2071292Rev: 1Disabled4 views
Sourceet/open
Fileemerging-info.rules
CreatedJuly 24, 2026
UpdatedJuly 24, 2026
Classificationmisc-activity
alert smb any any -> $HOME_NET any (msg:"ET INFO Excessive Number of SMB Session Requests in a short time frame"; flow:established,to_server; content:"|81 00|"; fast_pattern; startswith; threshold:type threshold,track by_src,count 30,seconds 60; classtype:misc-activity; sid:2071292; rev:1; metadata:affected_product Windows_XP_Vista_7_8_10_Server_32_64_Bit, affected_product Windows_11, attack_target SMB_Server, tls_state plaintext, created_at 2026_07_24, deployment Perimeter, deployment Internal, performance_impact Moderate, confidence High, signature_severity Unknown, updated_at 2026_07_24;)

Metadata

affected productWindows_11
attack targetSMB_Server
tls stateplaintext
created at2026_07_24
deploymentInternal
performance impactModerate
confidenceHigh
signature severityUnknown
updated at2026_07_24

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!