Home/Detection rules/Suricata / ET-open
Tool
Network IDS

Suricata / ET-open

1,547 rules · network intrusion-detection signatures
Network intrusion-detection signatures from open rulesets (ET Open, Snort Community, abuse.ch). These match malicious traffic patterns on the wire. A rule name links to its upstream reference where the ruleset publishes one; rules without a public reference show as plain text.
Class All trojan-activitydomain-c2bad-unknownweb-application-attackmisc-activitycommand-and-controlattempted-adminexploit-kitsocial-engineeringcredential-theftattempted-usertargeted-activityattempted-reconpup-activity
◈

Rules

50 shown of 1,547
et-open social-engineering
ET PHISHING Chase/Bank of America Phishing Landing Uri Structure Nov 27 2012
sid 2015938 format suricata
et-open social-engineering
ET PHISHING Possible Generic Phishing Landing Jul 12 2013
sid 2017135 format suricata T1566 ↗
et-open social-engineering
ET PHISHING Apple Phishing Landing Jan 30 2014
sid 2018042 format suricata
et-open social-engineering
ET PHISHING Possible iTunes Phishing Landing - Title over non SSL
sid 2018303 format suricata
et-open social-engineering
ET PHISHING PayPal Phishing Landing Nov 24 2014
sid 2019785 format suricata
et-open social-engineering
ET PHISHING Possible Dropbox Phishing Landing - Title over non SSL
sid 2020332 format suricata
et-open social-engineering
ET PHISHING Possible Tsukuba Banker Edwards Packed proxy.pac
sid 2020623 format suricata
et-open social-engineering
ET WEB_CLIENT Fake AV Phone Scam Landing June 11 2015 M1
sid 2021255 format suricata
et-open social-engineering
ET WEB_CLIENT Fake AV Phone Scam Landing June 16 2015 M4
sid 2021288 format suricata
et-open social-engineering
ET WEB_CLIENT Fake AV Phone Scam Landing June 26 2015 M5
sid 2021367 format suricata
et-open social-engineering
ET PHISHING Possible Google Drive/Dropbox Phishing Landing Jul 10 2015
sid 2021400 format suricata
et-open social-engineering
ET WEB_CLIENT Fake AV Phone Scam Landing July 20 2015 M2
sid 2021447 format suricata
et-open social-engineering
ET WEB_CLIENT Fake AV Phone Scam Landing July 20 2015 M4
sid 2021449 format suricata
et-open social-engineering
ET PHISHING Google Drive Phishing Landing M1 July 24 2015
sid 2021535 format suricata
et-open social-engineering
ET PHISHING Google Drive Phishing Landing M2 July 24 2015
sid 2021536 format suricata
et-open social-engineering
ET PHISHING Possible Generic Phishing Landing Jul 28 2015
sid 2021537 format suricata T1566 ↗
et-open social-engineering
ET PHISHING Possible Generic Phishing Landing Jul 28 2015
sid 2021538 format suricata T1566 ↗
et-open social-engineering
ET PHISHING Possible Generic Phishing Landing Jul 28 2015
sid 2021539 format suricata T1566 ↗
et-open social-engineering
ET PHISHING Possible Generic Phishing Landing Jul 28 2015
sid 2021540 format suricata T1566 ↗
et-open social-engineering
ET PHISHING Potential Data URI Phishing Oct 02 2015
sid 2021893 format suricata
et-open social-engineering
ET WEB_CLIENT Fake Virus Phone Scam Landing Oct 19 M3
sid 2021965 format suricata
et-open social-engineering
ET WEB_CLIENT Fake Virus Phone Scam Audio Oct 30
sid 2022012 format suricata
et-open social-engineering
ET WEB_CLIENT Fake Video Player Update Scam Oct 30
sid 2022013 format suricata
et-open social-engineering
ET PHISHING Mailbox Renewal Phish Landing Nov 13
sid 2022083 format suricata
et-open social-engineering
ET PHISHING Revalidation Phish Landing Nov 13 2015
sid 2022086 format suricata
et-open social-engineering
ET PHISHING Netsolhost SSL Proxying - Possible Phishing Nov 24 2015
sid 2022136 format suricata T1566 ↗
et-open social-engineering
ET WEB_CLIENT Tech Support Phone Scam Landing Dec 30 M1
sid 2022319 format suricata
et-open social-engineering
ET PHISHING Chrome Extension Phishing HTTP Request
sid 2022373 format suricata
et-open social-engineering
ET PHISHING Suspicious LastPass URI Structure - Possible Phishing
sid 2022374 format suricata T1566 ↗
et-open social-engineering
ET WEB_CLIENT Possible Fake AV Phone Scam Long Domain M1 Feb 29
sid 2022575 format suricata
et-open social-engineering
ET PHISHING JS Obfuscation - Possible Phishing 2016-03-01
sid 2022578 format suricata T1566 ↗
et-open social-engineering
ET WEB_CLIENT Fake AV Phone Scam Domain M1 Mar 3
sid 2022591 format suricata
et-open social-engineering
ET WEB_CLIENT Fake AV Phone Scam Domain M2 Mar 3
sid 2022592 format suricata
et-open social-engineering
ET WEB_CLIENT Fake AV Phone Scam Domain M3 Mar 3
sid 2022593 format suricata
et-open social-engineering
ET PHISHING Possible Phishing Landing - Data URI Inline Javascript Mar 07 2016
sid 2022597 format suricata T1566 ↗
et-open social-engineering
ET WEB_CLIENT Generic Fake Support Phone Scam Mar 8
sid 2022603 format suricata
et-open social-engineering
ET WEB_CLIENT Generic Fake Support Phone Scam Mar 9 M3
sid 2022607 format suricata
et-open social-engineering
ET WEB_CLIENT Fake Virus Phone Scam Landing Mar 9 M2
sid 2022608 format suricata
et-open social-engineering
ET PHISHING Possible Chase Phishing Domain Mar 14 2016
sid 2022615 format suricata
et-open social-engineering
ET PHISHING Possible Apple Phishing Domain Mar 14 2016
sid 2022616 format suricata
et-open social-engineering
ET PHISHING Possible USAA Phishing Domain Mar 14 2016
sid 2022617 format suricata
et-open social-engineering
ET PHISHING Possible Paypal Phishing Domain Mar 14 2016
sid 2022618 format suricata
et-open social-engineering
ET WEB_CLIENT Possible Fake AV Phone Scam Long Domain Mar 30 M2
sid 2022691 format suricata
et-open social-engineering
ET WEB_CLIENT Possible Fake AV Phone Scam Long Domain Apr 4
sid 2022696 format suricata
et-open social-engineering
ET WEB_CLIENT Fake AV Phone Scam Landing Apr 4
sid 2022697 format suricata
et-open social-engineering
ET PHISHING PhishMe.com Phishing Landing Exercise
sid 2022730 format suricata
et-open social-engineering
ET WEB_CLIENT Tech Support Phone Scam Landing M5 Jun 3
sid 2022854 format suricata
et-open social-engineering
ET WEB_CLIENT Tech Support Phone Scam Landing M1 Jun 29 2016
sid 2022925 format suricata
et-open social-engineering
ET WEB_CLIENT Tech Support Phone Scam Landing Jun 29 M3
sid 2022927 format suricata
et-open social-engineering
ET WEB_CLIENT Tech Support Phone Scam Landing 2016-07-21 M1
sid 2022980 format suricata
Showing 1-50 of 1,547
Prev 1 Next
SOC and Response
CVE triage
Stack monitoring
Am I affected
IOC triage
KEV catalog
Recently exploited
Daily brief
Change tracking
Detection Engineering
Coverage workspace
Detection coverage
Coverage check
Telemetry ceiling
SIEM query builder
Sigma rules
SIEM rules
YARA rules
Network rules
D3FEND
Threat Hunting
Threat actors
ATT&CK techniques
Attack paths
Indicators
Ransomware groups
Atomic tests
Red Team and Pentest
Exploitability triage
Recon pack
Attack paths
CAPEC patterns
Adversary emulation
Compliance and GRC
Framework mapping
Control assessment
Audit view
Atlas Search Threat actors Techniques Tools & malware CWE CAPEC KEV catalog Package vulns
About All capabilities Pricing API docs Privacy policy Terms of service
threatengine.sh