Home/Detection rules/Suricata / ET-open
Tool
Network IDS

Suricata / ET-open

659 rules · network intrusion-detection signatures
Network intrusion-detection signatures from open rulesets (ET Open, Snort Community, abuse.ch). These match malicious traffic patterns on the wire. A rule name links to its upstream reference where the ruleset publishes one; rules without a public reference show as plain text.
Class All trojan-activitydomain-c2bad-unknownweb-application-attackmisc-activitycommand-and-controlattempted-adminexploit-kitsocial-engineeringcredential-theftattempted-usertargeted-activityattempted-reconpup-activity
◈

Rules

50 shown of 659
et-open pup-activity
ET ADWARE_PUP Ezula Related User-Agent (mez)
sid 2000586 format suricata
et-open pup-activity
ET ADWARE_PUP Gator/Claria Data Submission
sid 2000596 format suricata
et-open pup-activity
ET ADWARE_PUP Keenvalue Update Engine
sid 2000932 format suricata
et-open pup-activity
ET ADWARE_PUP Casino on Net Reporting Data
sid 2001031 format suricata
et-open pup-activity
ET ADWARE_PUP Regnow.com Access
sid 2001223 format suricata
et-open pup-activity
ET ADWARE_PUP Gator/Clarian Agent
sid 2001306 format suricata
et-open pup-activity
ET ADWARE_PUP Webhancer Data Upload
sid 2001317 format suricata
et-open pup-activity
ET ADWARE_PUP Websearch.com Spyware
sid 2001325 format suricata
et-open pup-activity
ET ADWARE_PUP Ezula Install .exe
sid 2001334 format suricata
et-open pup-activity
ET ADWARE_PUP BInet Information Upload
sid 2001339 format suricata
et-open pup-activity
ET ADWARE_PUP ISearchTech.com XXXPornToolbar Activity (2)
sid 2001395 format suricata
et-open pup-activity
ET ADWARE_PUP E2give Related Downloading Code
sid 2001418 format suricata
et-open pup-activity
ET ADWARE_PUP MediaTickets Download
sid 2001448 format suricata
et-open pup-activity
ET ADWARE_PUP Xpire.info Spyware Install Reporting
sid 2001472 format suricata T1005 ↗
et-open pup-activity
ET ADWARE_PUP Searchmeup Spyware Install (prog)
sid 2001474 format suricata T1005 ↗
et-open pup-activity
ET ADWARE_PUP Searchmeup Spyware Receiving Commands
sid 2001475 format suricata
et-open pup-activity
ET ADWARE_PUP Searchmeup Spyware Install (systime)
sid 2001480 format suricata T1005 ↗
et-open pup-activity
ET ADWARE_PUP Searchmeup Spyware Install (mstask)
sid 2001483 format suricata T1005 ↗
et-open pup-activity
ET ADWARE_PUP Tibsystems Spyware Download
sid 2001488 format suricata
et-open pup-activity
ET ADWARE_PUP ISearchTech.com XXXPornToolbar Activity (IST)
sid 2001493 format suricata
et-open pup-activity
ET ADWARE_PUP Clickspring.net Spyware Reporting Successful Install
sid 2001494 format suricata
et-open pup-activity
ET ADWARE_PUP Outerinfo.com Spyware Advertising Campaign Download
sid 2001496 format suricata
et-open pup-activity
ET ADWARE_PUP Outerinfo.com Spyware Activity
sid 2001497 format suricata
et-open pup-activity
ET ADWARE_PUP Internet Optimizer Activity User-Agent (IOKernel)
sid 2001498 format suricata
et-open pup-activity
ET ADWARE_PUP Look2me Spyware Activity (1)
sid 2001499 format suricata
et-open pup-activity
ET ADWARE_PUP Clickspring.net Spyware Reporting
sid 2001500 format suricata
et-open pup-activity
ET ADWARE_PUP Searchmiracle.com Spyware Installer silent.exe Download
sid 2001533 format suricata T1005 ↗
et-open pup-activity
ET ADWARE_PUP Searchmiracle.com Spyware Install (silent_install)
sid 2001534 format suricata T1005 ↗
et-open pup-activity
ET ADWARE_PUP Searchmiracle.com Spyware Install (protector.exe)
sid 2001535 format suricata T1005 ↗
et-open pup-activity
ET ADWARE_PUP BInet Information Install Report
sid 2001576 format suricata
et-open pup-activity
ET ADWARE_PUP Webhancer Data Post
sid 2001677 format suricata
et-open pup-activity
ET ADWARE_PUP YourSiteBar User-Agent (istsvc)
sid 2001699 format suricata
et-open pup-activity
ET ADWARE_PUP Shop at Home Select Spyware User-Agent (Bundle)
sid 2001702 format suricata T1496 ↗
et-open pup-activity
ET ADWARE_PUP Context Plus Spyware User-Agent (Apropos)
sid 2001703 format suricata
et-open pup-activity
ET ADWARE_PUP Context Plus Spyware Install
sid 2001704 format suricata T1005 ↗
et-open pup-activity
ET ADWARE_PUP Context Plus Spyware User-Agent (Envolo)
sid 2001706 format suricata
et-open pup-activity
ET ADWARE_PUP Shop at Home Select Spyware User-Agent (SAH)
sid 2001707 format suricata T1496 ↗
et-open pup-activity
ET ADWARE_PUP SurfSidekick Activity
sid 2001731 format suricata
et-open pup-activity
ET ADWARE_PUP UCMore Spyware User-Agent (UCmore)
sid 2001736 format suricata
et-open pup-activity
ET ADWARE_PUP Enhance My Search Spyware User-Agent (HelperH)
sid 2001746 format suricata
et-open pup-activity
ET ADWARE_PUP ABX Toolbar ActiveX Install
sid 2001761 format suricata
et-open pup-activity
ET ADWARE_PUP Media Pass ActiveX Install
sid 2001783 format suricata
et-open pup-activity
ET ADWARE_PUP Easy Search Bar Spyware User-Agent (ESB)
sid 2001853 format suricata
et-open pup-activity
ET ADWARE_PUP EZULA Spyware User Agent
sid 2001854 format suricata
et-open pup-activity
ET ADWARE_PUP Fun Web Products Spyware User-Agent (FunWebProducts)
sid 2001855 format suricata
et-open pup-activity
ET ADWARE_PUP Hotbar Spyware User-Agent (Hotbar)
sid 2001858 format suricata
et-open pup-activity
ET ADWARE_PUP Fun Web Products Spyware User-Agent (MyWay)
sid 2001864 format suricata
et-open pup-activity
ET ADWARE_PUP MyWebSearch Spyware User-Agent (MyWebSearch)
sid 2001865 format suricata
et-open pup-activity
ET ADWARE_PUP Spyware User-Agent (sureseeker)
sid 2001868 format suricata
et-open pup-activity
ET ADWARE_PUP Spyware User-Agent (Sidesearch)
sid 2001869 format suricata
Showing 1-50 of 659
Prev 1 Next
SOC and Response
CVE triage
Stack monitoring
Am I affected
IOC triage
KEV catalog
Recently exploited
Daily brief
Change tracking
Detection Engineering
Coverage workspace
Detection coverage
Coverage check
Telemetry ceiling
SIEM query builder
Sigma rules
SIEM rules
YARA rules
Network rules
D3FEND
Threat Hunting
Threat actors
ATT&CK techniques
Attack paths
Indicators
Ransomware groups
Atomic tests
Red Team and Pentest
Exploitability triage
Recon pack
Attack paths
CAPEC patterns
Adversary emulation
Compliance and GRC
Framework mapping
Control assessment
Audit view
Atlas Search Threat actors Techniques Tools & malware CWE CAPEC KEV catalog Package vulns
About All capabilities Pricing API docs Privacy policy Terms of service
threatengine.sh