""ET POLICY HTTP traffic on port 443 (POST)""
SID: 2013926
Revision: 4
Class Type: bad-unknown
Metadata: attack_target Client_Endpoint, tls_state plaintext, created_at 2011_11_18, deployment Perimeter, signature_severity Informational, updated_at 2024_03_12
Reference:
Protocol: tcp
Source Network: $HOME_NET
Source Port: any
Destination Network: $EXTERNAL_NET
Destination Port: 443
Flow: to_server,established
Contents:
-
Value: "POST " Depth: 5
-
Value: !".etrade.com|3a|443|0d 0a|"
Within:
PCRE:
Special Options: