""ET POLICY Observed iesnare/iovation Tracking Activity""

SID: 2030113

Revision: 1

Class Type: policy-violation

Metadata: affected_product Any, attack_target Client_Endpoint, created_at 2020_05_06, deployment Perimeter, signature_severity Informational, updated_at 2020_05_06

Reference:

Protocol: tcp

Source Network: $HOME_NET

Source Port: any

Destination Network: $EXTERNAL_NET

Destination Port: 80

Flow: established,to_server

Contents:

• Value: "|47 45 54 20 2f 73 70 61 63 65 20 20 48 54 54 50 2f 31 2e 30 0a 0a|"

Within:

PCRE:

Special Options:

source