Browse Rules

Search and filter across all detection sources

189 rules

sagan medium other

[NETSCREEN] IP spoofing

[NETSCREEN] IP spoofing
sagan medium other

[EXTRAHOP] Spoofed TLS Certificate

[EXTRAHOP] Spoofed TLS Certificate
sagan medium other

[SONICWALL] IP Spoof Detected

[SONICWALL] IP Spoof Detected
sagan medium other

[CISCO-AIRMARSHAL] SSID Spoofing Detected

[CISCO-AIRMARSHAL] SSID Spoofing Detected
sagan medium other

[CISCO-MERAKI] SSID Spoofing Detected

[CISCO-MERAKI] SSID Spoofing Detected
sagan medium other

[CISCO-MERAKI] SSID Spoofing Detected

[CISCO-MERAKI] SSID Spoofing Detected
sagan unknown other

[HUAWEI] ATCKDF - IP spoof attack

[HUAWEI] ATCKDF - IP spoof attack
sagan medium other

[KISMET] Possible spoof/broken AP

[KISMET] Possible spoof/broken AP
sagan medium other

[KISMET] Spoofed disassociated/deauthenitcate packets

[KISMET] Spoofed disassociated/deauthenitcate packets
sagan high other

[SONICWALL] Possible IP spoof detected

[SONICWALL] Possible IP spoof detected
sagan high other

[SONICWALL] Possible IP spoof dropped

[SONICWALL] Possible IP spoof dropped
sagan medium other

[KISMET] Spoofed client [incorrectly] injecting data

[KISMET] Spoofed client [incorrectly] injecting data
sagan high other

[SONICWALL] Intrusion Detection - Spoof attack dropped

[SONICWALL] Intrusion Detection - Spoof attack dropped
sagan medium other

[WATCHGUARD] Detected an ARP spoofing attack

[WATCHGUARD] Detected an ARP spoofing attack
sagan medium other

[WINDOWS-SECURITY] Potential NetBIOS name spoofing

[WINDOWS-SECURITY] Potential NetBIOS name spoofing
sagan medium other

[WINDOWS-SECURITY] Potential NetBIOS name spoofing

[WINDOWS-SECURITY] Potential NetBIOS name spoofing
sublime medium mql

Brand spoof: Dropbox

Impersonation of Dropbox, a file sharing service; specifically spoofs the Dropbox sender domain.

sagan high other

[CISCO-MERAKI] WIPS Mac Spoofing Attack Detected

[CISCO-MERAKI] WIPS Mac Spoofing Attack Detected
sagan medium other

[KISMET] AP change channels. Possibel AP spoof

[KISMET] AP change channels. Possibel AP spoof
sagan medium other

[KISMET] AP spoof with less-secure encryption

[KISMET] AP spoof with less-secure encryption
sagan medium other

[KISMET] Misconfigured or spoofed client [ignoring DHCP]

[KISMET] Misconfigured or spoofed client [ignoring DHCP]
sagan medium other

[KISMET] Possible client spoof/MAC cloning attack

[KISMET] Possible client spoof/MAC cloning attack
sagan medium other

[WATCHGUARD] Possible loop or ARP spoofing detected

[WATCHGUARD] Possible loop or ARP spoofing detected
signature-base unknown yara

Guilin_veterans_cookie_spoofing_tool [yara]

Chinese Hacktool Set - file Guilin veterans cookie spoofing tool.exe
yara unknown yara

Guilin_veterans_cookie_spoofing_tool [malware]

Chinese Hacktool Set - file Guilin veterans cookie spoofing tool.exe