""ET POLICY HTTP traffic on port 443 (POST)""

SID: 2013926

Revision: 4

Class Type: bad-unknown

Metadata: attack_target Client_Endpoint, tls_state plaintext, created_at 2011_11_18, deployment Perimeter, signature_severity Informational, updated_at 2024_03_12

Reference:

Protocol: tcp

Source Network: $HOME_NET

Source Port: any

Destination Network: $EXTERNAL_NET

Destination Port: 443

Flow: to_server,established

Contents:

  • Value: "POST " Depth: 5

  • Value: !".etrade.com|3a|443|0d 0a|"

Within:

PCRE:

Special Options:

source