You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Philippe Antoine caa7946888 smb: adds file overlap event against evasions ... Evasion scenario is - a first dummy write of one byte at offset 0 is done - the second full write of EICAR at offset 0 is then done and does not trigger detection The last write had the final value, and as we cannot "cancel" the previous write, we set an event which is then transformed into an app-layer decoder alert		4 years ago
..
Makefile.am	rules: install dhcp-events.rules; order alphabetically	6 years ago
app-layer-events.rules	app-layer: protocol change API	8 years ago
decoder-events.rules	decode/hdlc: initial support	5 years ago
dhcp-events.rules	dhcp: add dhcp app-layer rules file	7 years ago
dnp3-events.rules	rules: add missing classtypes for event.rules	8 years ago
dns-events.rules	dns: cleanup: remove unused events	5 years ago
files.rules	rules: fix files.rules typo	5 years ago
http-events.rules	http: adds debug check against too many warnings	5 years ago
http2-events.rules	http2: settings from http1 upgrade	5 years ago
ipsec-events.rules	rules: fix event names for ikev2 (weak authentication and DH parameters)	6 years ago
kerberos-events.rules	Kerberos 5: rename weak crypto to weak encryption, and log it	7 years ago
modbus-events.rules	rules: add missing classtypes for event.rules	8 years ago
mqtt-events.rules	rust/mqtt: add MQTT parser	5 years ago
nfs-events.rules	rust/nfs: implement events	8 years ago
ntp-events.rules	Add event rules for NTP events	8 years ago
smb-events.rules	smb: adds file overlap event against evasions	4 years ago
smtp-events.rules	smtp/mime: Set event when name exceeds limit	5 years ago
ssh-events.rules	rules: add SSH decoder events rules	5 years ago
stream-events.rules	flow/stream: 'wrong thread' as stream event & counter	6 years ago
tls-events.rules	rules/tls: sync with changes to the TLS events	5 years ago