Search and filter across all detection sources
1,108 rules
[FORTINET] UTM dns Event Detected - Suspicious Traffic [250/2hours]
suspicious_traffic_port_666
Traffic to port 666
[CHECKPOINT] Action Quarantine
[FORTINET] FTP attempt
[NETSCREEN] Fragmented traffic
[NETSCREEN] ICMP flood
[NETSCREEN] ICMP fragment
[NETSCREEN] IP spoofing
[NETSCREEN] Malicious URL
[NETSCREEN] SYN fragment
[NETSCREEN] Unknown protocol
[NETSKOPE] watchlist alert
[PASSWORDSTATE] Password Deleted
[PASSWORDSTATE] Password Moved
[SONICWALL] Smurf Attack
[SQUID] TCP_DENIED
[SQUID] XSS attempt
[ARTILLERY] Honeyport attack detected
[CHECKPOINT] Action Forgot Passcode
[CHECKPOINT] Action Open Shell
[CHECKPOINT] Action Remote Wipe
[CHECKPOINT] Action Reset Passcode
[CHECKPOINT] Action Run Script