alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET DELETED MonetizeUs Outbound Activity Observed M1"; flow:established,to_server; http.method; content:"GET"; http.uri; content:"jsonp=__mtz_cb_"; fast_pattern; content:"&key="; distance:0; content:"&t="; distance:0; threshold:type limit, count 1, seconds 120, track by_src; classtype:bad-unknown; sid:2029600; rev:1; metadata:created_at 2020_03_09, signature_severity Unknown, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2020_03_09;)