Browse Rules

Search and filter across all detection sources

1,108 rules

sagan informational other

[FORTINET] UTM dns Event Detected - Suspicious Traffic [250/2hours]

[FORTINET] UTM dns Event Detected - Suspicious Traffic [250/2hours]

sagan informational other

[FORTINET] UTM dns Event Detected - Suspicious Traffic [250/2hours]

[FORTINET] UTM dns Event Detected - Suspicious Traffic [250/2hours]

chronicle unknown yara-l

suspicious_traffic_port_666

Traffic to port 666

sagan medium other

[CHECKPOINT] Action Quarantine

[CHECKPOINT] Action Quarantine

sagan medium other

[FORTINET] FTP attempt

[FORTINET] FTP attempt

sagan medium other

[FORTINET] FTP attempt

[FORTINET] FTP attempt

sagan medium other

[NETSCREEN] Fragmented traffic

[NETSCREEN] Fragmented traffic

sagan medium other

[NETSCREEN] ICMP flood

[NETSCREEN] ICMP flood

sagan medium other

[NETSCREEN] ICMP fragment

[NETSCREEN] ICMP fragment

sagan medium other

[NETSCREEN] IP spoofing

[NETSCREEN] IP spoofing

sagan medium other

[NETSCREEN] Malicious URL

[NETSCREEN] Malicious URL

sagan medium other

[NETSCREEN] SYN fragment

[NETSCREEN] SYN fragment

sagan medium other

[NETSCREEN] Unknown protocol

[NETSCREEN] Unknown protocol

sagan medium other

[NETSKOPE] watchlist alert

[NETSKOPE] watchlist alert

sagan medium other

[PASSWORDSTATE] Password Deleted

[PASSWORDSTATE] Password Deleted

sagan medium other

[PASSWORDSTATE] Password Moved

[PASSWORDSTATE] Password Moved

sagan medium other

[SONICWALL] Smurf Attack

[SONICWALL] Smurf Attack

sagan medium other

[SQUID] TCP_DENIED

[SQUID] TCP_DENIED

sagan medium other

[SQUID] XSS attempt

[SQUID] XSS attempt

sagan medium other

[ARTILLERY] Honeyport attack detected

[ARTILLERY] Honeyport attack detected

sagan medium other

[CHECKPOINT] Action Forgot Passcode

[CHECKPOINT] Action Forgot Passcode

sagan medium other

[CHECKPOINT] Action Open Shell

[CHECKPOINT] Action Open Shell

sagan medium other

[CHECKPOINT] Action Remote Wipe

[CHECKPOINT] Action Remote Wipe

sagan medium other

[CHECKPOINT] Action Reset Passcode

[CHECKPOINT] Action Reset Passcode

sagan medium other

[CHECKPOINT] Action Run Script

[CHECKPOINT] Action Run Script