ET DELETED Excessive Use of HeapLib Objects Likely Malicious Heap Spray Attempt
Sourceet/open
CreatedJuly 6, 2011
UpdatedJuly 26, 2019
Classificationshellcode-detect
alert http $EXTERNAL_NET any -> $HOME_NET any (msg:"ET DELETED Excessive Use of HeapLib Objects Likely Malicious Heap Spray Attempt"; flow:established,to_client; file_data; content:"Heap|2E|"; nocase; content:"Heap|2E|"; nocase; distance:0; content:"Heap|2E|"; nocase; distance:0; classtype:shellcode-detect; sid:2013222; rev:4; metadata:created_at 2011_07_06, signature_severity Unknown, updated_at 2019_07_26;)
Metadata
created at2011_07_06
signature severityUnknown
updated at2019_07_26
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!