""ET CURRENT_EVENTS StyX Landing Page""
SID: 2016248
Revision: 5
Class Type: bad-unknown
Metadata: created_at 2013_01_22, updated_at 2013_01_22
Reference:
Protocol: tcp
Source Network: $HOME_NET
Source Port: any
Destination Network: $EXTERNAL_NET
Destination Port: $HTTP_PORTS
Flow: established,to_server
Contents:
- Value: "/i.html?0x" Depth: 10
Within:
PCRE: "/\/i.html\?0x\d{1,2}=[a-zA-Z0-9+=]{100}/U"
Special Options:
- http_uri