mirror of
https://github.com/OISF/suricata.git
synced 2026-10-11 22:09:53 +00:00
9 lines
527 B
Plaintext
9 lines
527 B
Plaintext
# Kerberos app layer event rules
|
|
#
|
|
# SID's fall in the 2226000+ range. See rules/README.md
|
|
#
|
|
# These sigs fire at most once per connection.
|
|
#
|
|
alert krb5 any any -> any any (msg:"SURICATA Kerberos 5 malformed request data"; flow:to_server; app-layer-event:krb5.malformed_data; classtype:protocol-command-decode; sid:2226000; rev:1;)
|
|
alert krb5 any any -> any any (msg:"SURICATA Kerberos 5 weak encryption parameters"; flow:to_client; app-layer-event:krb5.weak_encryption; classtype:protocol-command-decode; sid:2226001; rev:1;)
|