Network IDS rules

Home/Network IDS rules

IDS / IPS

8 rules · linked to T1059 · Snort / Suricata signatures

Network intrusion-detection signatures from open rulesets (ET Open, Snort Community, abuse.ch). These match malicious traffic patterns on the wire. Expand a rule to view its source link.

◈

Rules

8 shown of 8

et-open trojan-activity

ET MALWARE Commvault Pre-Auth RCE (CVE-2025-34028) Post-Exploitation Activity (jsp webshell)

sid 2061839 format suricata

et-open trojan-activity

ET HUNTING HTTP Response Containing Base64-Encoded and Compressed Powershell Payload Keywords

sid 2062885 format suricata

et-open trojan-activity

ET HUNTING HTTP Response Containing Base64-Encoded Powershell Payload Keywords

sid 2062888 format suricata

et-open trojan-activity

ET HUNTING Dotted Quad Host Base64-Encoded Powershell Payload

sid 2063007 format suricata

et-open trojan-activity

ET HUNTING Dotted Quad Host Base64-Encoded PHP payload

sid 2063008 format suricata

et-open trojan-activity

ET HUNTING Dotted Quad Host Suspected IoT Botnet Loader Shell Script

sid 2063020 format suricata

et-open bad-unknown

ET HUNTING schtasks create Command in HTTP Body Response

sid 2064542 format suricata

et-open misc-activity

ET HUNTING Telegram API Request (POST)

sid 2068492 format suricata

Showing 1-8 of 8

Prev 1 Next

Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities

Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs

Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures

Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1

About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service

threatengine.sh · Open-source threat intelligence platform · 100+ authoritative sources · Every fact traces to its origin