""ET POLICY Edwards Packed proxy.pac from 724sky""

SID: 2021511

Revision: 2

Class Type: misc-activity

Metadata: created_at 2015_07_23, deployment Perimeter, signature_severity Informational, updated_at 2023_05_08

Reference:

  • md5

  • 50bd21aac1f57d90c54683995ec102aa

Protocol: tcp

Source Network: $EXTERNAL_NET

Source Port: $HTTP_PORTS

Destination Network: $HOME_NET

Destination Port: any

Flow: established,from_server

Contents:

  • Value: "eval(function(p,a,c"

  • Value: "|7C|FindProxyForURL|7C|"

  • Value: "|7c|proxy|7c|"

  • Value: "|7c|baidu|7c|"

Within:

PCRE:

Special Options:

  • file_data

  • nocase

  • nocase

  • nocase

source