ET INFO Observed dir Command via Inbound ICMP

SID: 2062639Rev: 122 views
Sourceet/open
CreatedMay 30, 2025
UpdatedMay 30, 2025
Classificationmisc-activity
alert icmp any any -> [$HOME_NET,$HTTP_SERVERS] any (msg:"ET INFO Observed dir Command via Inbound ICMP"; content:"dir|20|"; fast_pattern; content:"|3a 5c|"; classtype:misc-activity; sid:2062639; rev:1; metadata:created_at 2025_05_30, signature_severity Unknown, updated_at 2025_05_30;)

Metadata

created at2025_05_30
signature severityUnknown
updated at2025_05_30

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!