Home/Network IDS rules
IDS / IPS

Network IDS rules

1,487 rules · linked to T1189 · Snort / Suricata signatures
Network intrusion-detection signatures from open rulesets (ET Open, Snort Community, abuse.ch). These match malicious traffic patterns on the wire. Expand a rule to view its source link.

Rules

50 shown of 1,487
et-open attempted-user
ET WEB_CLIENT Adobe Acrobat PDF Reader use after free JavaScript engine (CVE-2017-16393)
sid 2025091 format suricata
sid 2048145 format suricata
sid 2048559 format suricata
sid 2048560 format suricata
sid 2048561 format suricata
sid 2048562 format suricata
sid 2048796 format suricata
sid 2050493 format suricata
sid 2050494 format suricata
sid 2050495 format suricata
sid 2050496 format suricata
sid 2052504 format suricata
sid 2052505 format suricata
sid 2052506 format suricata
sid 2052507 format suricata
sid 2052508 format suricata
sid 2052509 format suricata
sid 2054515 format suricata
sid 2054516 format suricata
et-open exploit-kit
ET EXPLOIT_KIT Malicious TA2726 TDS Domain in DNS Lookup (packedbrick .com)
sid 2054718 format suricata
et-open exploit-kit
ET EXPLOIT_KIT Malicious TDS Domain Domain in TLS SNI (packedbrick .com)
sid 2054719 format suricata
sid 2055659 format suricata
sid 2055660 format suricata
sid 2055773 format suricata
sid 2055774 format suricata
sid 2055814 format suricata
sid 2055815 format suricata
sid 2055820 format suricata
sid 2055821 format suricata
sid 2055828 format suricata
sid 2055829 format suricata
sid 2055832 format suricata
sid 2055833 format suricata
sid 2055897 format suricata
sid 2055898 format suricata
sid 2055980 format suricata
sid 2055981 format suricata
sid 2056002 format suricata
sid 2056003 format suricata
sid 2056490 format suricata
sid 2056677 format suricata
sid 2056678 format suricata
sid 2056679 format suricata
sid 2056680 format suricata
sid 2057182 format suricata
sid 2057183 format suricata
sid 2057184 format suricata
Showing 1-50 of 1,487
Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities
Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs
Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures
Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1
About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service
threatengine.sh  ·  Open-source threat intelligence platform  ·  100+ authoritative sources  ·  Every fact traces to its origin