""ET POLICY RemoteControlX rctrlx service created""

SID: 2010782

Revision: 2

Class Type: suspicious-filename-detect

Metadata: created_at 2010_07_30, updated_at 2010_07_30

Reference:

• Link

Protocol: tcp

Source Network: any

Source Port: any

Destination Network: $HOME_NET

Destination Port: [139,445]

Flow: to_server,established

Contents:

• Value: "|5c 00 72 00 63 00 74 00 72 00 6c 00 78 00 73 00 72 00 76 00 2e 00 65 00 78 00 65|"

Within:

PCRE:

Special Options:

source