#alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"ET POLICY Google Calendar in Use"; flow:established,to_server; content:"/calendar/"; http_uri; content:"Host|3a| www.google.com"; http_header; nocase; threshold:type both, count 1, seconds 60, track by_src; reference:url,www.computerworld.com.au/index.php?id=1687889918&eid=-255; reference:url,doc.emergingthreats.net/2003597; classtype:policy-violation; sid:2003597; rev:4; metadata:created_at 2010_07_30, updated_at 2010_07_30;) Added 2018-09-13 19:38:54 UTC
Added 2018-09-13 17:53:19 UTC
#alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"ET POLICY Google Calendar in Use"; flow:established,to_server; content:"/calendar/"; http_uri; content:"Host|3a| www.google.com"; http_header; nocase; threshold:type both, count 1, seconds 60, track by_src; reference:url,www.computerworld.com.au/index.php?id=1687889918&eid=-255; reference:url,doc.emergingthreats.net/2003597; classtype:policy-violation; sid:2003597; rev:4; metadata:created_at 2010_07_30, updated_at 2010_07_30;) Added 2017-08-07 20:56:50 UTC
#alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"ET POLICY Google Calendar in Use"; flow:established,to_server; content:"/calendar/"; http_uri; content:"Host|3a| www.google.com"; http_header; nocase; threshold:type both, count 1, seconds 60, track by_src; reference:url,www.computerworld.com.au/index.php?id=1687889918&eid=-255; reference:url,doc.emergingthreats.net/2003597; classtype:policy-violation; sid:2003597; rev:4;) Added 2011-10-12 19:13:45 UTC
#alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"ET POLICY Google Calendar in Use"; flow:established,to_server; content:"/calendar/"; http_uri; content:"Host|3a| www.google.com"; http_header; nocase; threshold:type both, count 1, seconds 60, track by_src; classtype:policy-violation; reference:url,www.computerworld.com.au/index.php?id=1687889918&eid=-255; reference:url,doc.emergingthreats.net/2003597; sid:2003597; rev:4;) Added 2011-09-14 22:26:45 UTC
#alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"ET POLICY Google Calendar in Use"; flow:established,to_server; content:"/calendar/"; http_uri; content:"Host|3a| www.google.com"; http_header; nocase; threshold:type both, count 1, seconds 60, track by_src; classtype:policy-violation; reference:url,www.computerworld.com.au/index.php?id=1687889918&eid=-255; reference:url,doc.emergingthreats.net/2003597; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/POLICY/POLICY_Google; sid:2003597; rev:4;) Added 2011-02-04 17:22:34 UTC
#alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"ET POLICY Google Calendar in Use"; flow:established,to_server; uricontent:"/calendar/"; content:"GET /calendar/"; rawbytes; offset:0; content:"Host\: www.google.com|0d 0a|"; nocase; threshold:type both, count 1, seconds 60, track by_src; classtype:policy-violation; reference:url,www.computerworld.com.au/index.php?id=1687889918&eid=-255; reference:url,doc.emergingthreats.net/2003597; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/POLICY/POLICY_Google; sid:2003597; rev:3;) Added 2009-02-11 19:15:22 UTC
#alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"ET POLICY Google Calendar in Use"; flow:established,to_server; uricontent:"/calendar/"; content:"GET /calendar/"; rawbytes; offset:0; content:"Host\: www.google.com|0d 0a|"; nocase; threshold:type both, count 1, seconds 60, track by_src; classtype:policy-violation; reference:url,www.computerworld.com.au/index.php?id=1687889918&eid=-255; reference:url,doc.emergingthreats.net/2003597; reference:url,www.emergingthreats.net/cgi-bin/cvsweb.cgi/sigs/POLICY/POLICY_Google; sid:2003597; rev:3;) Added 2009-02-11 19:15:22 UTC
#alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"ET POLICY Google Calendar in Use"; flow:established,to_server; uricontent:"/calendar/"; content:"GET /calendar/"; rawbytes; offset:0; content:"Host\: www.google.com|0d 0a|"; nocase; threshold:type both, count 1, seconds 60, track by_src; classtype:policy-violation; reference:url,www.computerworld.com.au/index.php?id=1687889918&eid=-255; sid:2003597; rev:2;) Added 2008-01-31 18:48:09 UTC
#alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"ET POLICY Google Calendar in Use"; flow:established,to_server; uricontent:"/calendar/"; content:"GET /calendar/"; rawbytes; offset:0; content:"Host\: www.google.com|0d 0a|"; nocase; threshold:type both, count 1, seconds 60, track by_src; classtype:policy-violation; reference:url,www.computerworld.com.au/index.php?id=1687889918&eid=-255; sid:2003597; rev:2;) Added 2008-01-31 18:48:09 UTC
#alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"BLEEDING-EDGE POLICY Google Calendar in Use"; flow:established,to_server; uricontent:"/calendar/"; content:"GET /calendar/"; rawbytes; offset:0; content:"Host\: www.google.com|0d 0a|"; nocase; threshold:type both, count 1, seconds 60, track by_src; classtype:policy-violation; reference:url,www.computerworld.com.au/index.php?id=1687889918&eid=-255; sid:2003597; rev:1;) Added 2007-08-29 09:46:53 UTC
#alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"BLEEDING-EDGE POLICY Google Calendar in Use"; flow:established,to_server; uricontent:"/calendar/"; content:"GET /calendar/"; rawbytes; offset:0; content:"Host\: www.google.com|0d 0a|"; nocase; threshold:type both, count 1, seconds 60, track by_src; classtype:policy-violation; reference:url,www.computerworld.com.au/index.php?id=1687889918&eid=-255; sid:2003597; rev:1;) Added 2007-08-29 05:16:37 UTC
#alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"BLEEDING-EDGE POLICY Google Calendar in Use"; flow:established,to_server; uricontent:"/calendar/"; content:"GET /calendar/"; rawbytes; offset:0; content:"Host\: www.google.com|0d 0a|"; nocase; threshold:type both, count 1, seconds 60, track by_src; classtype:policy-violation; reference:url,www.computerworld.com.au/index.php?id=1687889918&eid=-255; sid:2003597; rev:1;) Added 2007-08-29 04:03:19 UTC
#alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"BLEEDING-EDGE POLICY Google Calendar in Use"; flow:established,to_server; uricontent:"/calendar/"; content:"GET /calendar/"; rawbytes; offset:0; content:"Host\: www.google.com|0d 0a|"; nocase; threshold:type both, count 1, seconds 60, track by_src; classtype:policy-violation; reference:url,www.computerworld.com.au/index.php?id=1687889918&eid=-255; sid:2003597; rev:1;) Added 2007-08-29 03:48:03 UTC
#alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"BLEEDING-EDGE POLICY Google Calendar in Use"; flow:established,to_server; uricontent:"/calendar/"; content:"GET /calendar/"; rawbytes; offset:0; content:"Host\: www.google.com|0d 0a|"; nocase; threshold:type both, count 1, seconds 60, track by_src; classtype:policy-violation; reference:url,www.computerworld.com.au/index.php?id=1687889918&eid=-255; sid:2003597; rev:1;) Added 2007-08-27 12:54:20 UTC
#alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"BLEEDING-EDGE POLICY Google Calendar in Use"; flow:established,to_server; uricontent:"/calendar/"; content:"GET /calendar/"; rawbytes; offset:0; content:"Host\: www.google.com|0d 0a|"; nocase; threshold:type both, count 1, seconds 60, track by_src; classtype:policy-violation; reference:url,www.computerworld.com.au/index.php?id=1687889918&eid=-255; sid:2003597; rev:1;) Added 2007-08-27 10:32:15 UTC
#alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"BLEEDING-EDGE POLICY Google Calendar in Use"; flow:established,to_server; uricontent:"/calendar/"; content:"GET /calendar/"; rawbytes; offset:0; content:"Host\: www.google.com|0d 0a|"; nocase; threshold:type both, count 1, seconds 60, track by_src; classtype:policy-violation; reference:url,www.computerworld.com.au/index.php?id=1687889918&eid=-255; sid:2003597; rev:1;) Added 2007-08-27 05:34:31 UTC
#alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"BLEEDING-EDGE POLICY Google Calendar in Use"; flow:established,to_server; uricontent:"/calendar/"; content:"GET /calendar/"; rawbytes; offset:0; content:"Host\: www.google.com|0d 0a|"; nocase; threshold:type both, count 1, seconds 60, track by_src; classtype:policy-violation; reference:url,www.computerworld.com.au/index.php?id=1687889918&eid=-255; sid:2003597; rev:1;) Added 2007-08-27 05:08:21 UTC
#alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"BLEEDING-EDGE POLICY Google Calendar in Use"; flow:established,to_server; uricontent:"/calendar/"; content:"GET /calendar/"; rawbytes; offset:0; content:"Host\: www.google.com|0d 0a|"; nocase; threshold:type both, count 1, seconds 60, track by_src; classtype:policy-violation; reference:url,www.computerworld.com.au/index.php?id=1687889918&eid=-255; sid:2003597; rev:1;) Added 2007-08-27 04:38:37 UTC
#alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"BLEEDING-EDGE POLICY Google Calendar in Use"; flow:established,to_server; uricontent:"/calendar/"; content:"GET /calendar/"; rawbytes; offset:0; content:"Host\: www.google.com|0d 0a|"; nocase; threshold:type both, count 1, seconds 60, track by_src; classtype:policy-violation; reference:url,www.computerworld.com.au/index.php?id=1687889918&eid=-255; sid:2003597; rev:1;) Added 2007-08-27 03:48:00 UTC
#alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"BLEEDING-EDGE POLICY Google Calendar in Use"; flow:established,to_server; uricontent:"/calendar/"; content:"GET /calendar/"; rawbytes; offset:0; content:"Host\: www.google.com|0d 0a|"; nocase; threshold:type both, count 1, seconds 60, track by_src; classtype:policy-violation; reference:url,www.computerworld.com.au/index.php?id=1687889918&eid=-255; sid:2003597; rev:1;) Added 2007-08-27 02:38:57 UTC
#alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"BLEEDING-EDGE POLICY Google Calendar in Use"; flow:established,to_server; uricontent:"/calendar/"; content:"GET /calendar/"; rawbytes; offset:0; content:"Host\: www.google.com|0d 0a|"; nocase; threshold:type both, count 1, seconds 60, track by_src; classtype:policy-violation; reference:url,www.computerworld.com.au/index.php?id=1687889918&eid=-255; sid:2003597; rev:1;) Added 2007-08-26 23:05:22 UTC
#alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"BLEEDING-EDGE POLICY Google Calendar in Use"; flow:established,to_server; uricontent:"/calendar/"; content:"GET /calendar/"; rawbytes; offset:0; content:"Host\: www.google.com|0d 0a|"; nocase; threshold:type both, count 1, seconds 60, track by_src; classtype:policy-violation; reference:url,www.computerworld.com.au/index.php?id=1687889918&eid=-255; sid:2003597; rev:1;) Added 2007-08-25 14:27:05 UTC
#alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"BLEEDING-EDGE POLICY Google Calendar in Use"; flow:established,to_server; uricontent:"/calendar/"; content:"GET /calendar/"; rawbytes; offset:0; content:"Host\: www.google.com|0d 0a|"; nocase; threshold:type both, count 1, seconds 60, track by_src; classtype:policy-violation; reference:url,www.computerworld.com.au/index.php?id=1687889918&eid=-255; sid:2003597; rev:1;) Added 2007-08-25 01:34:11 UTC
#alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"BLEEDING-EDGE POLICY Google Calendar in Use"; flow:established,to_server; uricontent:"/calendar/"; content:"GET /calendar/"; rawbytes; offset:0; content:"Host\: www.google.com|0d 0a|"; nocase; threshold:type both, count 1, seconds 60, track by_src; classtype:policy-violation; reference:url,www.computerworld.com.au/index.php?id=1687889918&eid=-255; sid:2003597; rev:1;) Added 2007-08-25 00:51:54 UTC
#alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"BLEEDING-EDGE POLICY Google Calendar in Use"; flow:established,to_server; uricontent:"/calendar/"; content:"GET /calendar/"; rawbytes; offset:0; content:"Host\: www.google.com|0d 0a|"; nocase; threshold:type both, count 1, seconds 60, track by_src; classtype:policy-violation; reference:url,www.computerworld.com.au/index.php?id=1687889918&eid=-255; sid:2003597; rev:1;) Added 2007-08-24 23:47:02 UTC
#alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"BLEEDING-EDGE POLICY Google Calendar in Use"; flow:established,to_server; uricontent:"/calendar/"; content:"GET /calendar/"; rawbytes; offset:0; content:"Host\: www.google.com|0d 0a|"; nocase; threshold:type both, count 1, seconds 60, track by_src; classtype:policy-violation; reference:url,www.computerworld.com.au/index.php?id=1687889918&eid=-255; sid:2003597; rev:1;) Added 2007-08-24 16:03:48 UTC
#alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"BLEEDING-EDGE POLICY Google Calendar in Use"; flow:established,to_server; uricontent:"/calendar/"; content:"GET /calendar/"; rawbytes; offset:0; content:"Host\: www.google.com|0d 0a|"; nocase; threshold:type both, count 1, seconds 60, track by_src; classtype:policy-violation; reference:url,www.computerworld.com.au/index.php?id=1687889918&eid=-255; sid:2003597; rev:1;) Added 2007-08-24 14:39:34 UTC
#alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"BLEEDING-EDGE POLICY Google Calendar in Use"; flow:established,to_server; uricontent:"/calendar/"; content:"GET /calendar/"; rawbytes; offset:0; content:"Host\: www.google.com|0d 0a|"; nocase; threshold:type both, count 1, seconds 60, track by_src; classtype:policy-violation; reference:url,www.computerworld.com.au/index.php?id=1687889918&eid=-255; sid:2003597; rev:1;) Added 2007-08-24 03:16:18 UTC
#alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"BLEEDING-EDGE POLICY Google Calendar in Use"; flow:established,to_server; uricontent:"/calendar/"; content:"GET /calendar/"; rawbytes; offset:0; content:"Host\: www.google.com|0d 0a|"; nocase; threshold:type both, count 1, seconds 60, track by_src; classtype:policy-violation; reference:url,www.computerworld.com.au/index.php?id=1687889918&eid=-255; sid:2003597; rev:1;) Added 2007-08-24 02:56:45 UTC
#alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"BLEEDING-EDGE POLICY Google Calendar in Use"; flow:established,to_server; uricontent:"/calendar/"; content:"GET /calendar/"; rawbytes; offset:0; content:"Host\: www.google.com|0d 0a|"; nocase; threshold:type both, count 1, seconds 60, track by_src; classtype:policy-violation; reference:url,www.computerworld.com.au/index.php?id=1687889918&eid=-255; sid:2003597; rev:1;) Added 2007-08-23 08:46:19 UTC
#alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"BLEEDING-EDGE POLICY Google Calendar in Use"; flow:established,to_server; uricontent:"/calendar/"; content:"GET /calendar/"; rawbytes; offset:0; content:"Host\: www.google.com|0d 0a|"; nocase; threshold:type both, count 1, seconds 60, track by_src; classtype:policy-violation; reference:url,www.computerworld.com.au/index.php?id=1687889918&eid=-255; sid:2003597; rev:1;) Added 2007-08-22 23:04:41 UTC
#alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"BLEEDING-EDGE POLICY Google Calendar in Use"; flow:established,to_server; uricontent:"/calendar/"; content:"GET /calendar/"; rawbytes; offset:0; content:"Host\: www.google.com|0d 0a|"; nocase; threshold:type both, count 1, seconds 60, track by_src; classtype:policy-violation; reference:url,www.computerworld.com.au/index.php?id=1687889918&eid=-255; sid:2003597; rev:1;) Added 2007-08-22 22:47:08 UTC
#alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"BLEEDING-EDGE POLICY Google Calendar in Use"; flow:established,to_server; uricontent:"/calendar/"; content:"GET /calendar/"; rawbytes; offset:0; content:"Host\: www.google.com|0d 0a|"; nocase; threshold:type both, count 1, seconds 60, track by_src; classtype:policy-violation; reference:url,www.computerworld.com.au/index.php?id=1687889918&eid=-255; sid:2003597; rev:1;) Added 2007-08-22 12:04:04 UTC
#alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"BLEEDING-EDGE POLICY Google Calendar in Use"; flow:established,to_server; uricontent:"/calendar/"; content:"GET /calendar/"; rawbytes; offset:0; content:"Host\: www.google.com|0d 0a|"; nocase; threshold:type both, count 1, seconds 60, track by_src; classtype:policy-violation; reference:url,www.computerworld.com.au/index.php?id=1687889918&eid=-255; sid:2003597; rev:1;) Added 2007-08-21 22:05:45 UTC
#alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"BLEEDING-EDGE POLICY Google Calendar in Use"; flow:established,to_server; uricontent:"/calendar/"; content:"GET /calendar/"; rawbytes; offset:0; content:"Host\: www.google.com|0d 0a|"; nocase; threshold:type both, count 1, seconds 60, track by_src; classtype:policy-violation; reference:url,www.computerworld.com.au/index.php?id=1687889918&eid=-255; sid:2003597; rev:1;) Added 2007-08-21 00:28:52 UTC
#alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"BLEEDING-EDGE POLICY Google Calendar in Use"; flow:established,to_server; uricontent:"/calendar/"; content:"GET /calendar/"; rawbytes; offset:0; content:"Host\: www.google.com|0d 0a|"; nocase; threshold:type both, count 1, seconds 60, track by_src; classtype:policy-violation; reference:url,www.computerworld.com.au/index.php?id=1687889918&eid=-255; sid:2003597; rev:1;) Added 2007-08-21 00:09:44 UTC
#alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"BLEEDING-EDGE POLICY Google Calendar in Use"; flow:established,to_server; uricontent:"/calendar/"; content:"GET /calendar/"; rawbytes; offset:0; content:"Host\: www.google.com|0d 0a|"; nocase; threshold:type both, count 1, seconds 60, track by_src; classtype:policy-violation; reference:url,www.computerworld.com.au/index.php?id=1687889918&eid=-255; sid:2003597; rev:1;) Added 2007-08-20 10:04:04 UTC
#alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"BLEEDING-EDGE POLICY Google Calendar in Use"; flow:established,to_server; uricontent:"/calendar/"; content:"GET /calendar/"; rawbytes; offset:0; content:"Host\: www.google.com|0d 0a|"; nocase; threshold:type both, count 1, seconds 60, track by_src; classtype:policy-violation; reference:url,www.computerworld.com.au/index.php?id=1687889918&eid=-255; sid:2003597; rev:1;) Added 2007-08-20 04:17:04 UTC
#alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"BLEEDING-EDGE POLICY Google Calendar in Use"; flow:established,to_server; uricontent:"/calendar/"; content:"GET /calendar/"; rawbytes; offset:0; content:"Host\: www.google.com|0d 0a|"; nocase; threshold:type both, count 1, seconds 60, track by_src; classtype:policy-violation; reference:url,www.computerworld.com.au/index.php?id=1687889918&eid=-255; sid:2003597; rev:1;) Added 2007-08-19 22:43:09 UTC
#alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"BLEEDING-EDGE POLICY Google Calendar in Use"; flow:established,to_server; uricontent:"/calendar/"; content:"GET /calendar/"; rawbytes; offset:0; content:"Host\: www.google.com|0d 0a|"; nocase; threshold:type both, count 1, seconds 60, track by_src; classtype:policy-violation; reference:url,www.computerworld.com.au/index.php?id=1687889918&eid=-255; sid:2003597; rev:1;) Added 2007-08-19 20:52:31 UTC
#alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"BLEEDING-EDGE POLICY Google Calendar in Use"; flow:established,to_server; uricontent:"/calendar/"; content:"GET /calendar/"; rawbytes; offset:0; content:"Host\: www.google.com|0d 0a|"; nocase; threshold:type both, count 1, seconds 60, track by_src; classtype:policy-violation; reference:url,www.computerworld.com.au/index.php?id=1687889918&eid=-255; sid:2003597; rev:1;) Added 2007-08-19 01:36:00 UTC
#alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"BLEEDING-EDGE POLICY Google Calendar in Use"; flow:established,to_server; uricontent:"/calendar/"; content:"GET /calendar/"; rawbytes; offset:0; content:"Host\: www.google.com|0d 0a|"; nocase; threshold:type both, count 1, seconds 60, track by_src; classtype:policy-violation; reference:url,www.computerworld.com.au/index.php?id=1687889918&eid=-255; sid:2003597; rev:1;) Added 2007-08-19 01:22:42 UTC
#alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"BLEEDING-EDGE POLICY Google Calendar in Use"; flow:established,to_server; uricontent:"/calendar/"; content:"GET /calendar/"; rawbytes; offset:0; content:"Host\: www.google.com|0d 0a|"; nocase; threshold:type both, count 1, seconds 60, track by_src; classtype:policy-violation; reference:url,www.computerworld.com.au/index.php?id=1687889918&eid=-255; sid:2003597; rev:1;) Added 2007-08-18 11:46:41 UTC
#alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"BLEEDING-EDGE POLICY Google Calendar in Use"; flow:established,to_server; uricontent:"/calendar/"; content:"GET /calendar/"; rawbytes; offset:0; content:"Host\: www.google.com|0d 0a|"; nocase; threshold:type both, count 1, seconds 60, track by_src; classtype:policy-violation; reference:url,www.computerworld.com.au/index.php?id=1687889918&eid=-255; sid:2003597; rev:1;) Added 2007-08-18 11:40:05 UTC
#alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"BLEEDING-EDGE POLICY Google Calendar in Use"; flow:established,to_server; uricontent:"/calendar/"; content:"GET /calendar/"; rawbytes; offset:0; content:"Host\: www.google.com|0d 0a|"; nocase; threshold:type both, count 1, seconds 60, track by_src; classtype:policy-violation; reference:url,www.computerworld.com.au/index.php?id=1687889918&eid=-255; sid:2003597; rev:1;) Added 2007-08-18 11:38:19 UTC
#alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"BLEEDING-EDGE POLICY Google Calendar in Use"; flow:established,to_server; uricontent:"/calendar/"; content:"GET /calendar/"; rawbytes; offset:0; content:"Host\: www.google.com|0d 0a|"; nocase; threshold:type both, count 1, seconds 60, track by_src; classtype:policy-violation; reference:url,www.computerworld.com.au/index.php?id=1687889918&eid=-255; sid:2003597; rev:1;) Added 2007-08-18 15:03:39 UTC
#alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"BLEEDING-EDGE POLICY Google Calendar in Use"; flow:established,to_server; uricontent:"/calendar/"; content:"GET /calendar/"; rawbytes; offset:0; content:"Host\: www.google.com|0d 0a|"; nocase; threshold:type both, count 1, seconds 60, track by_src; classtype:policy-violation; reference:url,www.computerworld.com.au/index.php?id=1687889918&eid=-255; sid:2003597; rev:1;) Added 2007-08-18 02:31:23 UTC
#alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"BLEEDING-EDGE POLICY Google Calendar in Use"; flow:established,to_server; uricontent:"/calendar/"; content:"GET /calendar/"; rawbytes; offset:0; content:"Host\: www.google.com|0d 0a|"; nocase; threshold:type both, count 1, seconds 60, track by_src; classtype:policy-violation; reference:url,www.computerworld.com.au/index.php?id=1687889918&eid=-255; sid:2003597; rev:1;) Added 2007-08-16 04:18:42 UTC
#alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"BLEEDING-EDGE POLICY Google Calendar in Use"; flow:established,to_server; uricontent:"/calendar/"; content:"GET /calendar/"; rawbytes; offset:0; content:"Host\: www.google.com|0d 0a|"; nocase; threshold:type both, count 1, seconds 60, track by_src; classtype:policy-violation; reference:url,www.computerworld.com.au/index.php?id=1687889918&eid=-255; sid:2003597; rev:1;) Added 2007-08-15 23:01:36 UTC
#alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"BLEEDING-EDGE POLICY Google Calendar in Use"; flow:established,to_server; uricontent:"/calendar/"; content:"GET /calendar/"; rawbytes; offset:0; content:"Host\: www.google.com|0d 0a|"; nocase; threshold:type both, count 1, seconds 60, track by_src; classtype:policy-violation; reference:url,www.computerworld.com.au/index.php?id=1687889918&eid=-255; sid:2003597; rev:1;) Added 2007-08-15 07:02:20 UTC
#alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"BLEEDING-EDGE POLICY Google Calendar in Use"; flow:established,to_server; uricontent:"/calendar/"; content:"GET /calendar/"; rawbytes; offset:0; content:"Host\: www.google.com|0d 0a|"; nocase; threshold:type both, count 1, seconds 60, track by_src; classtype:policy-violation; reference:url,www.computerworld.com.au/index.php?id=1687889918&eid=-255; sid:2003597; rev:1;) Added 2007-08-15 05:06:52 UTC
#alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"BLEEDING-EDGE POLICY Google Calendar in Use"; flow:established,to_server; uricontent:"/calendar/"; content:"GET /calendar/"; rawbytes; offset:0; content:"Host\: www.google.com|0d 0a|"; nocase; threshold:type both, count 1, seconds 60, track by_src; classtype:policy-violation; reference:url,www.computerworld.com.au/index.php?id=1687889918&eid=-255; sid:2003597; rev:1;) Added 2007-08-15 04:39:51 UTC
#alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"BLEEDING-EDGE POLICY Google Calendar in Use"; flow:established,to_server; uricontent:"/calendar/"; content:"GET /calendar/"; rawbytes; offset:0; content:"Host\: www.google.com|0d 0a|"; nocase; threshold:type both, count 1, seconds 60, track by_src; classtype:policy-violation; reference:url,www.computerworld.com.au/index.php?id=1687889918&eid=-255; sid:2003597; rev:1;) Added 2007-08-15 03:31:56 UTC
#alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"BLEEDING-EDGE POLICY Google Calendar in Use"; flow:established,to_server; uricontent:"/calendar/"; content:"GET /calendar/"; rawbytes; offset:0; content:"Host\: www.google.com|0d 0a|"; nocase; threshold:type both, count 1, seconds 60, track by_src; classtype:policy-violation; reference:url,www.computerworld.com.au/index.php?id=1687889918&eid=-255; sid:2003597; rev:1;) Added 2007-08-15 03:19:44 UTC
#alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"BLEEDING-EDGE POLICY Google Calendar in Use"; flow:established,to_server; uricontent:"/calendar/"; content:"GET /calendar/"; rawbytes; offset:0; content:"Host\: www.google.com|0d 0a|"; nocase; threshold:type both, count 1, seconds 60, track by_src; classtype:policy-violation; reference:url,www.computerworld.com.au/index.php?id=1687889918&eid=-255; sid:2003597; rev:1;) Added 2007-08-15 03:14:20 UTC
#alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"BLEEDING-EDGE POLICY Google Calendar in Use"; flow:established,to_server; uricontent:"/calendar/"; content:"GET /calendar/"; rawbytes; offset:0; content:"Host\: www.google.com|0d 0a|"; nocase; threshold:type both, count 1, seconds 60, track by_src; classtype:policy-violation; reference:url,www.computerworld.com.au/index.php?id=1687889918&eid=-255; sid:2003597; rev:1;) Added 2007-08-15 02:47:09 UTC
#alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"BLEEDING-EDGE POLICY Google Calendar in Use"; flow:established,to_server; uricontent:"/calendar/"; content:"GET /calendar/"; rawbytes; offset:0; content:"Host\: www.google.com|0d 0a|"; nocase; threshold:type both, count 1, seconds 60, track by_src; classtype:policy-violation; reference:url,www.computerworld.com.au/index.php?id=1687889918&eid=-255; sid:2003597; rev:1;) Added 2007-08-15 01:31:24 UTC
#alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"BLEEDING-EDGE POLICY Google Calendar in Use"; flow:established,to_server; uricontent:"/calendar/"; content:"GET /calendar/"; rawbytes; offset:0; content:"Host\: www.google.com|0d 0a|"; nocase; threshold:type both, count 1, seconds 60, track by_src; classtype:policy-violation; reference:url,www.computerworld.com.au/index.php?id=1687889918&eid=-255; sid:2003597; rev:1;) Added 2007-08-15 01:16:11 UTC
#alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"BLEEDING-EDGE POLICY Google Calendar in Use"; flow:established,to_server; uricontent:"/calendar/"; content:"GET /calendar/"; rawbytes; offset:0; content:"Host\: www.google.com|0d 0a|"; nocase; threshold:type both, count 1, seconds 60, track by_src; classtype:policy-violation; reference:url,www.computerworld.com.au/index.php?id=1687889918&eid=-255; sid:2003597; rev:1;) Added 2007-08-14 23:16:13 UTC
alert tcp $HOME_NET any -> $EXTERNAL_NET $HTTP_PORTS (msg:"BLEEDING-EDGE CURRENT EVENTS Google Calendar in Use"; flow:established,to_server; uricontent:"/calendar/"; content:"GET /calendar/"; rawbytes; offset:0; content:"Host\: www.google.com|0d 0a|"; nocase; threshold:type both, count 1, seconds 60, track by_src; classtype:policy-violation; reference:url,www.computerworld.com.au/index.php?id=1687889918&eid=-255; sid:2003597; rev:1;) Added 2007-04-18 17:00:40 UTC As noted in the reference article, much sensitive data is being disclosed via google calendar public events. This sig is appropriate for a corporate environment where google calendar use should be controlled or prohibited. -- MattJonkman - 19 Apr 2007
Edit | Attach | Print version | History: r2 < r1 | Backlinks | Raw View | WYSIWYG | More topic actionsTopic revision: r2 - 2007-04-19 - MattJonkman
Main Web
Create New Topic
Index
Search
Changes
Preferences- User Reference
- ATasteOfTWiki
- TextFormattingRules
- Signature Reference
- WebRss Feed
- EmergingFAQ
 |
|
Copyright © Emerging Threats