ET DELETED String Replace in PDF File, Likely Hostile

SID: 2011504Rev: 60 views
History
Sourceet/open
CreatedSeptember 27, 2010
UpdatedJuly 26, 2019
Classificationbad-unknown
alert http $EXTERNAL_NET any -> $HOME_NET any (msg:"ET DELETED String Replace in PDF File, Likely Hostile"; flow:established,to_client; file_data; content:"%PDF-"; within:5; content:".replace|28|"; nocase; reference:url,www.w3schools.com/jsref/jsref_replace.asp; classtype:bad-unknown; sid:2011504; rev:6; metadata:created_at 2010_09_27, signature_severity Unknown, updated_at 2019_07_26;)

References

urlwww.w3schools.com/jsref/jsref_replace.asp

Metadata

created at2010_09_27
signature severityUnknown
updated at2019_07_26

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!