Sourcefire VRT Rules Update

Date: 2011-10-27

This is the complete list of rules modified and added in the Sourcefire VRT Certified rule pack for Snort version 2.9.1.1.

The format of the file is:

gid:sid <-> Default rule state <-> Message (rule group)

New Rules:


 * 1:20396 <-> DISABLED <-> VOIP-SIP-UDP INVITE flood (voip.rules)
 * 1:20397 <-> DISABLED <-> VOIP-SIP-TCP INVITE flood (voip.rules)
 * 1:20398 <-> DISABLED <-> VOIP-SIP-UDP Response code 420 Bad Extension response flood (voip.rules)
 * 1:20399 <-> DISABLED <-> VOIP-SIP-TCP Response code 420 Bad Extension response flood (voip.rules)
 * 1:20400 <-> DISABLED <-> VOIP-SIP-UDP Response code 415 Unsupported Media Type response flood (voip.rules)
 * 1:20401 <-> DISABLED <-> VOIP-SIP-TCP Response code 415 Unsupported Media Type response flood (voip.rules)
 * 1:20402 <-> DISABLED <-> VOIP-SIP-UDP Response code 405 Method Not Allowed response flood (voip.rules)
 * 1:20403 <-> DISABLED <-> VOIP-SIP-TCP Response code 405 Method Not Allowed response flood (voip.rules)
 * 1:20404 <-> DISABLED <-> VOIP-SIP-TCP inbound 100 Trying message (voip.rules)
 * 1:20405 <-> DISABLED <-> VOIP-SIP-TCP inbound 408 Request Timeout message (voip.rules)
 * 1:20406 <-> DISABLED <-> VOIP-SIP-TCP inbound 501 Not Implemented message (voip.rules)
 * 1:20407 <-> DISABLED <-> VOIP-SIP-TCP inbound 604 Does Not Exist Anywhere message (voip.rules)
 * 1:20408 <-> DISABLED <-> VOIP-SIP-TCP inbound 415 Unsupported Media Type message (voip.rules)
 * 1:20409 <-> DISABLED <-> VOIP-SIP-TCP inbound 481 Call/Leg Transaction Does Not Exist (voip.rules)
 * 1:20410 <-> DISABLED <-> VOIP-SIP-TCP inbound 401 unauthorized message (voip.rules)
 * 1:20411 <-> DISABLED <-> VOIP-SIP-TCP inbound 404 Not Found (voip.rules)
 * 1:20412 <-> DISABLED <-> VOIP-SIP-TCP outbound 404 Not Found (voip.rules)
 * 1:20413 <-> DISABLED <-> VOIP-SIP-TCP outbound 100 Trying message (voip.rules)
 * 1:20414 <-> DISABLED <-> VOIP-SIP-TCP outbound 408 Request Timeout message (voip.rules)
 * 1:20415 <-> DISABLED <-> VOIP-SIP-TCP outbound 501 Not Implemented message (voip.rules)
 * 1:20416 <-> DISABLED <-> VOIP-SIP-TCP outbound 604 Does Not Exist Anywhere message (voip.rules)
 * 1:20417 <-> DISABLED <-> VOIP-SIP-TCP outbound 415 Unsupported Media Type message (voip.rules)
 * 1:20418 <-> DISABLED <-> VOIP-SIP-TCP outbound 481 Call/Leg Transaction Does Not Exist (voip.rules)
 * 1:20419 <-> DISABLED <-> VOIP-SIP-TCP outbound 401 Unauthorized message (voip.rules)
 * 1:20420 <-> DISABLED <-> VOIP-SIP-TCP INVITE message invalid IP address (voip.rules)
 * 1:20421 <-> DISABLED <-> VOIP-SIP-TCP INVITE message Content-Length header size of zero (voip.rules)
 * 1:20422 <-> DISABLED <-> VOIP-SIP-TCP OPTIONS message Via field request misplaced - after terminating newline (voip.rules)
 * 1:20423 <-> DISABLED <-> VOIP-SIP-TCP OPTIONS message Call-ID header request misplaced - after terminating newline (voip.rules)
 * 1:20424 <-> DISABLED <-> VOIP-SIP-TCP Sivus scanner detected (voip.rules)
 * 1:20425 <-> DISABLED <-> VOIP-SIP-TCP Cisco 7940/7960 INVITE Remote-Party-ID header denial of service attempt (voip.rules)
 * 1:20426 <-> DISABLED <-> VOIP-SIP-TCP MultiTech INVITE message buffer overflow attempt (voip.rules)
 * 1:20427 <-> DISABLED <-> VOIP-SIP-UDP OpenSBC VIA header denial of service attempt (voip.rules)
 * 1:20320 <-> DISABLED <-> VOIP-SIP-UDP From header XSS injection attempt (voip.rules)
 * 1:20375 <-> DISABLED <-> VOIP-SIP-TCP Contact header missing terminating quote (voip.rules)
 * 1:20315 <-> DISABLED <-> VOIP-SIP-TCP Via header invalid characters detected (voip.rules)
 * 1:20311 <-> DISABLED <-> VOIP-SIP-TCP Max-Forwards value over 70 (voip.rules)
 * 1:20366 <-> DISABLED <-> VOIP-SIP-UDP Contact header XSS injection attempt (voip.rules)
 * 1:20309 <-> DISABLED <-> VOIP-SIP-UDP CSeq header multiple CSeq headers  (voip.rules)
 * 1:20352 <-> DISABLED <-> VOIP-SIP-TCP Expires header overflow attempt (voip.rules)
 * 1:20323 <-> DISABLED <-> VOIP-SIP-TCP From header format string attempt (voip.rules)
 * 1:20329 <-> DISABLED <-> VOIP-SIP-TCP From header missing terminating quote (voip.rules)
 * 1:20360 <-> DISABLED <-> VOIP-SIP-UDP Call-ID header invalid seperators (voip.rules)
 * 1:20391 <-> DISABLED <-> VOIP-SDP-UDP Asterisk Attribute header rtpmap field buffer overflow attempt (voip.rules)
 * 1:20370 <-> DISABLED <-> VOIP-SIP-UDP Contact header whitespace in field attempt (voip.rules)
 * 1:20327 <-> DISABLED <-> VOIP-SIP-TCP From header unquoted tokens in field attempt (voip.rules)
 * 1:20322 <-> DISABLED <-> VOIP-SIP-UDP From header format string attempt (voip.rules)
 * 1:20358 <-> DISABLED <-> VOIP-SIP-UDP Call-ID header format string attempt (voip.rules)
 * 1:20357 <-> DISABLED <-> VOIP-SIP-TCP Call-ID header XSS injection attempt (voip.rules)
 * 1:20381 <-> DISABLED <-> VOIP-SIP-TCP Remote-Party-ID header hexadecimal characters in IP address field (voip.rules)
 * 1:20365 <-> DISABLED <-> VOIP-SIP-TCP Contact header invalid characters detected (voip.rules)
 * 1:20348 <-> DISABLED <-> VOIP-SIP-UDP Subject header XSS injection attempt (voip.rules)
 * 1:20304 <-> DISABLED <-> VOIP-SIP-TCP SIP URI possible format string attempt (voip.rules)
 * 1:20374 <-> DISABLED <-> VOIP-SIP-UDP Contact header missing terminating quote (voip.rules)
 * 1:20386 <-> DISABLED <-> VOIP-SDP-UDP Connection header invalid value (voip.rules)
 * 1:20387 <-> DISABLED <-> VOIP-SDP-TCP T.38 fax rate management attribute buffer overflow attempt (voip.rules)
 * 1:20385 <-> DISABLED <-> VOIP-SDP-TCP Version header overflow attempt (voip.rules)
 * 1:20316 <-> DISABLED <-> VOIP-SIP-UDP Via header invalid seperators (voip.rules)
 * 1:20346 <-> DISABLED <-> VOIP-SIP-UDP To header multiple To headers (voip.rules)
 * 1:20380 <-> DISABLED <-> VOIP-SIP-TCP Authorization header invalid characters in response parameter (voip.rules)
 * 1:20383 <-> DISABLED <-> VOIP-SDP-TCP Time header contains negative value (voip.rules)
 * 1:20382 <-> DISABLED <-> VOIP-SDP-TCP Media header port field invalid value (voip.rules)
 * 1:20336 <-> DISABLED <-> VOIP-SIP-UDP To header format string attempt (voip.rules)
 * 1:20345 <-> DISABLED <-> VOIP-SIP-TCP To header missing terminating quote (voip.rules)
 * 1:20373 <-> DISABLED <-> VOIP-SIP-TCP Contact header unquoted tokens in field attempt (voip.rules)
 * 1:20364 <-> DISABLED <-> VOIP-SIP-TCP Contact header format string attempt (voip.rules)
 * 1:20392 <-> DISABLED <-> VOIP-SDP-TCP Asterisk Attribute header rtpmap field buffer overflow attempt (voip.rules)
 * 1:20359 <-> DISABLED <-> VOIP-SIP-TCP Call-ID header format string attempt (voip.rules)
 * 1:20319 <-> DISABLED <-> VOIP-SIP-TCP From header invalid characters detected (voip.rules)
 * 1:20308 <-> DISABLED <-> VOIP-SIP-TCP CSeq header method mismatch attempt (voip.rules)
 * 1:20343 <-> DISABLED <-> VOIP-SIP-TCP To header invalid seperators (voip.rules)
 * 1:20355 <-> DISABLED <-> VOIP-SIP-TCP Call-ID header invalid characters detected (voip.rules)
 * 1:20356 <-> DISABLED <-> VOIP-SIP-UDP Call-ID header XSS injection attempt (voip.rules)
 * 1:20312 <-> DISABLED <-> VOIP-SIP-TCP Max-Forwards header invalid characters detected (voip.rules)
 * 1:20344 <-> DISABLED <-> VOIP-SIP-UDP To header missing terminating quote (voip.rules)
 * 1:20388 <-> DISABLED <-> VOIP-SDP-TCP T.38 fax EC attribute buffer overflow attempt (voip.rules)
 * 1:20314 <-> DISABLED <-> VOIP-SIP-TCP Via header format string attempt (voip.rules)
 * 1:20350 <-> DISABLED <-> VOIP-SIP-UDP Subject header format string attempt (voip.rules)
 * 1:20302 <-> DISABLED <-> VOIP-SIP-TCP SIP URI multiple at signs in message (voip.rules)
 * 1:20347 <-> DISABLED <-> VOIP-SIP-TCP To header multiple To headers (voip.rules)
 * 1:20384 <-> DISABLED <-> VOIP-SDP-TCP Time header contains long value (voip.rules)
 * 1:20369 <-> DISABLED <-> VOIP-SIP-TCP Contact header format string attempt (voip.rules)
 * 1:20378 <-> DISABLED <-> VOIP-SIP-UDP Date header invalid characters detected (voip.rules)
 * 1:20326 <-> DISABLED <-> VOIP-SIP-UDP From header unquoted tokens in field attempt (voip.rules)
 * 1:20354 <-> DISABLED <-> VOIP-SIP-TCP Call-ID header format string attempt (voip.rules)
 * 1:20328 <-> DISABLED <-> VOIP-SIP-UDP From header missing terminating quote (voip.rules)
 * 1:20324 <-> DISABLED <-> VOIP-SIP-UDP From header whitespace in field attempt (voip.rules)
 * 1:20307 <-> DISABLED <-> VOIP-SIP-UDP CSeq header method mismatch attempt (voip.rules)
 * 1:20332 <-> DISABLED <-> VOIP-SIP-TCP To header contains recursive URL-encoded data (voip.rules)
 * 1:20367 <-> DISABLED <-> VOIP-SIP-TCP Contact header XSS injection attempt (voip.rules)
 * 1:20310 <-> DISABLED <-> VOIP-SIP-TCP CSeq header multiple CSeq headers (voip.rules)
 * 1:20361 <-> DISABLED <-> VOIP-SIP-TCP Call-ID header invalid seperators (voip.rules)
 * 1:20390 <-> DISABLED <-> VOIP-SDP-TCP Attribute header rtpmap field invalid payload type (voip.rules)
 * 1:20318 <-> DISABLED <-> VOIP-SIP-TCP From header format string attempt (voip.rules)
 * 1:20342 <-> DISABLED <-> VOIP-SIP-UDP To header invalid seperators (voip.rules)
 * 1:20317 <-> DISABLED <-> VOIP-SIP-TCP Via header invalid seperators (voip.rules)
 * 1:20337 <-> DISABLED <-> VOIP-SIP-TCP To header format string attempt (voip.rules)
 * 1:20306 <-> DISABLED <-> VOIP-SIP-TCP CSeq header invalid characters detected (voip.rules)
 * 1:20393 <-> DISABLED <-> VOIP-SIP-TCP BYE flood (voip.rules)
 * 1:20301 <-> DISABLED <-> VOIP-SIP-TCP TEL URI type overflow attempt (voip.rules)
 * 1:20338 <-> DISABLED <-> VOIP-SIP-UDP To header whitespace in field attempt (voip.rules)
 * 1:20349 <-> DISABLED <-> VOIP-SIP-TCP Subject header XSS injection attempt (voip.rules)
 * 1:20341 <-> DISABLED <-> VOIP-SIP-TCP To header unquoted tokens in field attempt (voip.rules)
 * 1:20389 <-> DISABLED <-> VOIP-SDP-TCP Attribute header buffer overflow attempt (voip.rules)
 * 1:20321 <-> DISABLED <-> VOIP-SIP-TCP From header XSS injection attempt (voip.rules)
 * 1:20379 <-> DISABLED <-> VOIP-SIP-TCP Date header invalid characters detected (voip.rules)
 * 1:20303 <-> DISABLED <-> VOIP-SIP-UDP SIP URI possible format string attempt (voip.rules)
 * 1:20362 <-> DISABLED <-> VOIP-SIP-UDP Call-ID header multiple Call-ID headers (voip.rules)
 * 1:20339 <-> DISABLED <-> VOIP-SIP-UDP To header whitespace in field attempt (voip.rules)
 * 1:20372 <-> DISABLED <-> VOIP-SIP-UDP Contact header unquoted tokens in field attempt (voip.rules)
 * 1:20330 <-> DISABLED <-> VOIP-SIP-UDP From header multiple From headers (voip.rules)
 * 1:20394 <-> DISABLED <-> VOIP-SIP-TCP CANCEL flood (voip.rules)
 * 1:20333 <-> DISABLED <-> VOIP-SIP-TCP To header invalid characters detected (voip.rules)
 * 1:20351 <-> DISABLED <-> VOIP-SIP-TCP Subject header format string attempt (voip.rules)
 * 1:20325 <-> DISABLED <-> VOIP-SIP-TCP From header whitespace in field attempt (voip.rules)
 * 1:20368 <-> DISABLED <-> VOIP-SIP-UDP Contact header format string attempt (voip.rules)
 * 1:20371 <-> DISABLED <-> VOIP-SIP-TCP Contact header whitespace in field attempt (voip.rules)
 * 1:20376 <-> DISABLED <-> VOIP-SIP-TCP Content-Type header format string attempt (voip.rules)
 * 1:20331 <-> DISABLED <-> VOIP-SIP-TCP From header multiple From headers (voip.rules)
 * 1:20334 <-> DISABLED <-> VOIP-SIP-UDP To header XSS injection attempt (voip.rules)
 * 1:20395 <-> DISABLED <-> VOIP-SIP-TCP REGISTER flood (voip.rules)
 * 1:20335 <-> DISABLED <-> VOIP-SIP-TCP To header XSS injection attempt (voip.rules)
 * 1:20305 <-> DISABLED <-> VOIP-SIP-TCP CSeq header format string attempt (voip.rules)
 * 1:20363 <-> DISABLED <-> VOIP-SIP-TCP Call-ID header multiple Call-ID headers (voip.rules)
 * 1:20377 <-> DISABLED <-> VOIP-SIP-TCP Content-Type header invalid characters detected (voip.rules)
 * 1:20313 <-> DISABLED <-> VOIP-SIP-TCP Via header missing SIP field (voip.rules)
 * 1:20340 <-> DISABLED <-> VOIP-SIP-UDP To header unquoted tokens in field attempt (voip.rules)
 * 1:20353 <-> DISABLED <-> VOIP-SIP-TCP Expires header invalid characters detected (voip.rules)
 * 1:20299 <-> DISABLED <-> VOIP-SIP-TCP Invalid request spaces at end of request line attempt (voip.rules)
 * 1:20296 <-> DISABLED <-> VOIP-SIP-TCP inbound INVITE message (voip.rules)
 * 1:20297 <-> DISABLED <-> VOIP-SIP-TCP outbound INVITE message (voip.rules)
 * 1:17429 <-> ENABLED <-> WEB-MISC Microsoft ASP.NET information disclosure attempt  (web-misc.rules)
 * 1:17428 <-> ENABLED <-> WEB-MISC Microsoft ASP.NET information disclosure attempt  (web-misc.rules)
 * 1:20298 <-> DISABLED <-> VOIP-SIP-UDP Invalid request spaces at end of request line attempt (voip.rules)
 * 1:20300 <-> DISABLED <-> VOIP-SIP-TCP SIP URI type overflow attempt (voip.rules)

Modified Rules:


 * 1:11969 <-> DISABLED <-> VOIP-SIP-UDP inbound 401 unauthorized message (voip.rules)
 * 1:16573 <-> ENABLED <-> WEB-ACTIVEX obfuscated ActiveX object instantiation via unescape (web-activex.rules)
 * 1:17037 <-> ENABLED <-> WEB-ACTIVEX MS Access multiple control instantiation memory corruption attempt  (web-activex.rules)
 * 1:17226 <-> ENABLED <-> WEB-ACTIVEX AXIS Camera ActiveX initialization via script (web-activex.rules)
 * 1:17545 <-> ENABLED <-> WEB-ACTIVEX Lotus Domino Web Access ActiveX Controls buffer overflow attempt (web-activex.rules)
 * 1:17557 <-> ENABLED <-> WEB-ACTIVEX Novell iPrint ActiveX operation parameter overflow (web-activex.rules)
 * 1:17746 <-> ENABLED <-> NETBIOS SMB client TRANS response Find_First2 filename overflow attempt (netbios.rules)
 * 1:18197 <-> ENABLED <-> WEB-ACTIVEX Microsoft COleSite ActiveX memory corruption attempt  (web-activex.rules)
 * 1:18198 <-> ENABLED <-> WEB-ACTIVEX Microsoft COleSite ActiveX memory corruption attempt  (web-activex.rules)
 * 1:4147 <-> ENABLED <-> WEB-ACTIVEX ActiveLabel ActiveX object access (web-activex.rules)
 * 1:4154 <-> ENABLED <-> WEB-ACTIVEX Active Setup ActiveX object access (web-activex.rules)
 * 1:4159 <-> ENABLED <-> WEB-ACTIVEX Multimedia File Property Sheet ActiveX object access (web-activex.rules)
 * 1:4164 <-> ENABLED <-> WEB-ACTIVEX DigWebX MSN ActiveX object access (web-activex.rules)
 * 1:4171 <-> ENABLED <-> WEB-ACTIVEX Registration Wizard ActiveX object access (web-activex.rules)
 * 1:4176 <-> ENABLED <-> WEB-ACTIVEX Office 2000 and 2002 Web Components Chart ActiveX object access (web-activex.rules)
 * 1:4182 <-> ENABLED <-> WEB-ACTIVEX MSN Chat v4.5, 4.6 ActiveX object access (web-activex.rules)
 * 1:4187 <-> ENABLED <-> WEB-ACTIVEX Terminal Services Advanced Client ActiveX object access (web-activex.rules)
 * 1:4192 <-> ENABLED <-> WEB-ACTIVEX HHOpen ActiveX object access (web-activex.rules)
 * 1:4200 <-> ENABLED <-> WEB-ACTIVEX Index Server Scope Administration ActiveX object access (web-activex.rules)
 * 1:4205 <-> ENABLED <-> WEB-ACTIVEX Microsoft Visual Database Tools Database Designer v7.0 ActiveX object access (web-activex.rules)
 * 1:4210 <-> ENABLED <-> WEB-ACTIVEX Internet Explorer Msb1geen.dll ActiveX object access (web-activex.rules)
 * 1:4215 <-> ENABLED <-> WEB-ACTIVEX Microsoft HTML Popup Window ActiveX object access (web-activex.rules)
 * 1:4220 <-> ENABLED <-> WEB-ACTIVEX Microsoft Network and Dial-Up Connections ActiveX object access (web-activex.rules)
 * 1:4225 <-> ENABLED <-> WEB-ACTIVEX Microsoft Repository ActiveX object access (web-activex.rules)
 * 1:4230 <-> ENABLED <-> WEB-ACTIVEX Search Assistant UI ActiveX object access (web-activex.rules)
 * 1:4235 <-> ENABLED <-> WEB-ACTIVEX Helper Object for Java ActiveX object access (web-activex.rules)
 * 1:4890 <-> ENABLED <-> WEB-ACTIVEX IAVIStream & IAVIFile Proxy ActiveX object access (web-activex.rules)
 * 1:4895 <-> ENABLED <-> WEB-ACTIVEX PSTypeInfo ActiveX object access (web-activex.rules)
 * 1:4900 <-> ENABLED <-> WEB-ACTIVEX Outlook Progress Ctl ActiveX object access (web-activex.rules)
 * 1:4905 <-> ENABLED <-> WEB-ACTIVEX Microsoft Repository Object ActiveX object access (web-activex.rules)
 * 1:4910 <-> ENABLED <-> WEB-ACTIVEX Microsoft Repository Relationship Definition ActiveX object access (web-activex.rules)
 * 1:11968 <-> DISABLED <-> VOIP-SIP-UDP inbound INVITE message (voip.rules)
 * 1:14765 <-> ENABLED <-> WEB-ACTIVEX Macrovision InstallShield Update Service Agent ActiveX function call (web-activex.rules)
 * 1:13589 <-> DISABLED <-> VOIP-SIP-UDP OPTIONS message Via header request misplaced - after terminating newline (voip.rules)
 * 1:4915 <-> ENABLED <-> WEB-ACTIVEX Shortcut Handler ActiveX object access (web-activex.rules)
 * 1:6004 <-> ENABLED <-> WEB-ACTIVEX Microsoft DT DDS Circular Auto Layout Logic 2 ActiveX object access (web-activex.rules)
 * 1:6009 <-> ENABLED <-> WEB-ACTIVEX RDS.Dataspace ActiveX object access (web-activex.rules)
 * 1:7003 <-> ENABLED <-> WEB-ACTIVEX ADODB.Recordset ActiveX function call access (web-activex.rules)
 * 1:7010 <-> DISABLED <-> WEB-ACTIVEX HtmlDlgSafeHelper.HtmlDlgSafeHelper.1 ActiveX function call access (web-activex.rules)
 * 1:7017 <-> DISABLED <-> WEB-ACTIVEX RDS.DataControl ActiveX function call access (web-activex.rules)
 * 1:7431 <-> ENABLED <-> WEB-ACTIVEX DirectFrame.DirectControl.1 ActiveX clsid access (web-activex.rules)
 * 1:7442 <-> ENABLED <-> WEB-ACTIVEX mmAEPlugIn.AEPlugIn.1 ActiveX clsid access (web-activex.rules)
 * 1:7452 <-> ENABLED <-> WEB-ACTIVEX WM Color Converter Filter ActiveX clsid access (web-activex.rules)
 * 1:7462 <-> ENABLED <-> WEB-ACTIVEX WMT Black Frame Generator ActiveX clsid access (web-activex.rules)
 * 1:7472 <-> ENABLED <-> WEB-ACTIVEX WMT FormatConversion Prop Page ActiveX clsid access (web-activex.rules)
 * 1:7482 <-> ENABLED <-> WEB-ACTIVEX WMT MuxDeMux Filter ActiveX clsid access (web-activex.rules)
 * 1:7488 <-> ENABLED <-> WEB-ACTIVEX WMT Screen capture Filter ActiveX clsid access (web-activex.rules)
 * 1:7490 <-> ENABLED <-> WEB-ACTIVEX WMT Switch Filter ActiveX clsid access (web-activex.rules)
 * 1:7492 <-> ENABLED <-> WEB-ACTIVEX WMT Virtual Renderer ActiveX clsid access (web-activex.rules)
 * 1:7494 <-> ENABLED <-> WEB-ACTIVEX WMT Virtual Source ActiveX clsid access (web-activex.rules)
 * 1:7496 <-> ENABLED <-> WEB-ACTIVEX WMT Volume ActiveX clsid access (web-activex.rules)
 * 1:7498 <-> ENABLED <-> WEB-ACTIVEX WM TV Out Smooth Picture Filter ActiveX clsid access (web-activex.rules)
 * 1:7500 <-> ENABLED <-> WEB-ACTIVEX WM VIH2 Fix ActiveX clsid access (web-activex.rules)
 * 1:7502 <-> ENABLED <-> WEB-ACTIVEX tsuserex.ADsTSUserEx.1 ActiveX clsid access (web-activex.rules)
 * 1:7862 <-> DISABLED <-> WEB-ACTIVEX McSubMgr.IsAppExpired ActiveX function call access (web-activex.rules)
 * 1:7863 <-> DISABLED <-> WEB-ACTIVEX McSubMgr.IsOldAppInstalled ActiveX function call access (web-activex.rules)
 * 1:7868 <-> ENABLED <-> WEB-ACTIVEX ADODB.Recordset ActiveX clsid access (web-activex.rules)
 * 1:7874 <-> ENABLED <-> WEB-ACTIVEX Microsoft Office PivotTable 10.0 ActiveX clsid access (web-activex.rules)
 * 1:7878 <-> ENABLED <-> WEB-ACTIVEX AxMetaStream.MetaStreamCtl ActiveX clsid access (web-activex.rules)
 * 1:7880 <-> ENABLED <-> WEB-ACTIVEX AxMetaStream.MetaStreamCtlSecondary ActiveX clsid access (web-activex.rules)
 * 1:7882 <-> ENABLED <-> WEB-ACTIVEX AccSync.AccSubNotHandler ActiveX clsid access (web-activex.rules)
 * 1:7884 <-> ENABLED <-> WEB-ACTIVEX AolCalSvr.ACCalendarListCtrl ActiveX clsid access (web-activex.rules)
 * 1:7886 <-> ENABLED <-> WEB-ACTIVEX AolCalSvr.ACDictionary ActiveX clsid access (web-activex.rules)
 * 1:7888 <-> ENABLED <-> WEB-ACTIVEX AOLFlash.AOLFlash ActiveX clsid access (web-activex.rules)
 * 1:7890 <-> ENABLED <-> WEB-ACTIVEX AOL.MemExpWz ActiveX clsid access (web-activex.rules)
 * 1:7892 <-> ENABLED <-> WEB-ACTIVEX AOL Phobos Class ActiveX clsid access (web-activex.rules)
 * 1:8007 <-> ENABLED <-> WEB-ACTIVEX Dutch_Dutch Stemmer ActiveX clsid access (web-activex.rules)
 * 1:8009 <-> ENABLED <-> WEB-ACTIVEX English_UK Stemmer ActiveX clsid access (web-activex.rules)
 * 1:8011 <-> ENABLED <-> WEB-ACTIVEX English_US Stemmer ActiveX clsid access (web-activex.rules)
 * 1:7894 <-> ENABLED <-> WEB-ACTIVEX AOL.PicDownloadCtrl ActiveX clsid access (web-activex.rules)
 * 1:8015 <-> ENABLED <-> WEB-ACTIVEX German_German Stemmer ActiveX clsid access (web-activex.rules)
 * 1:8017 <-> ENABLED <-> WEB-ACTIVEX ICM Class Manager ActiveX clsid access (web-activex.rules)
 * 1:8019 <-> ENABLED <-> WEB-ACTIVEX Internet Explorer Address Bar ActiveX clsid access (web-activex.rules)
 * 1:8021 <-> ENABLED <-> WEB-ACTIVEX ISSimpleCommandCreator.1 ActiveX clsid access (web-activex.rules)
 * 1:8023 <-> ENABLED <-> WEB-ACTIVEX Italian_Italian Stemmer ActiveX clsid access (web-activex.rules)
 * 1:8025 <-> ENABLED <-> WEB-ACTIVEX Microsoft HTML Window Security Proxy ActiveX clsid access (web-activex.rules)
 * 1:7896 <-> ENABLED <-> WEB-ACTIVEX AOL.PicEditCtrl ActiveX clsid access (web-activex.rules)
 * 1:8027 <-> ENABLED <-> WEB-ACTIVEX Microsoft WBEM Event Subsystem ActiveX clsid access (web-activex.rules)
 * 1:8029 <-> ENABLED <-> WEB-ACTIVEX MidiOut Class Manager ActiveX clsid access (web-activex.rules)
 * 1:8031 <-> ENABLED <-> WEB-ACTIVEX Mslablti.MarshalableTI.1 ActiveX clsid access (web-activex.rules)
 * 1:7898 <-> ENABLED <-> WEB-ACTIVEX AOL.PicSsvrCtrl ActiveX clsid access (web-activex.rules)
 * 1:8033 <-> ENABLED <-> WEB-ACTIVEX QC.MessageMover.1 ActiveX clsid access (web-activex.rules)
 * 1:8035 <-> ENABLED <-> WEB-ACTIVEX Spanish_Modern Stemmer ActiveX clsid access (web-activex.rules)
 * 1:8037 <-> ENABLED <-> WEB-ACTIVEX Swedish_Default Stemmer ActiveX clsid access (web-activex.rules)
 * 1:8039 <-> ENABLED <-> WEB-ACTIVEX syncui.dll ActiveX clsid access (web-activex.rules)
 * 1:7900 <-> ENABLED <-> WEB-ACTIVEX AOL.UPFCtrl ActiveX clsid access (web-activex.rules)
 * 1:8041 <-> ENABLED <-> WEB-ACTIVEX VFW Capture Class Manager ActiveX clsid access (web-activex.rules)
 * 1:8043 <-> ENABLED <-> WEB-ACTIVEX Video Effect Class Manager 1 Input ActiveX clsid access (web-activex.rules)
 * 1:8045 <-> ENABLED <-> WEB-ACTIVEX Video Effect Class Manager 2 Input ActiveX clsid access (web-activex.rules)
 * 1:8047 <-> ENABLED <-> WEB-ACTIVEX WaveIn Class Manager ActiveX clsid access (web-activex.rules)
 * 1:8049 <-> ENABLED <-> WEB-ACTIVEX WaveOut and DSound Class Manager ActiveX clsid access (web-activex.rules)
 * 1:7902 <-> ENABLED <-> WEB-ACTIVEX CDDBControlAOL.CDDBAOLControl ActiveX clsid access (web-activex.rules)
 * 1:8051 <-> ENABLED <-> WEB-ACTIVEX WDM Instance Provider ActiveX clsid access (web-activex.rules)
 * 1:8053 <-> DISABLED <-> WEB-ACTIVEX DirectAnimation.PathControl ActiveX clsid access (web-activex.rules)
 * 1:8055 <-> DISABLED <-> WEB-ACTIVEX DirectAnimation.PathControl ActiveX function call access (web-activex.rules)
 * 1:7906 <-> ENABLED <-> WEB-ACTIVEX CDO.KnowledgeSearchFolder ActiveX clsid access (web-activex.rules)
 * 1:8064 <-> ENABLED <-> WEB-ACTIVEX Scriptlet.Typelib ActiveX clsid access (web-activex.rules)
 * 1:8066 <-> ENABLED <-> WEB-ACTIVEX Windows Scripting Host Shell ActiveX clsid access (web-activex.rules)
 * 1:8068 <-> DISABLED <-> WEB-ACTIVEX Windows Scripting Host Shell ActiveX function call access (web-activex.rules)
 * 1:8069 <-> ENABLED <-> WEB-ACTIVEX Microsoft Virtual Machine ActiveX clsid access (web-activex.rules)
 * 1:8363 <-> ENABLED <-> WEB-ACTIVEX Business Object Factory ActiveX clsid access (web-activex.rules)
 * 1:7908 <-> ENABLED <-> WEB-ACTIVEX DXImageTransform.Microsoft.Chroma ActiveX clsid access (web-activex.rules)
 * 1:8365 <-> ENABLED <-> WEB-ACTIVEX DExplore.AppObj.8.0 ActiveX clsid access (web-activex.rules)
 * 1:8367 <-> ENABLED <-> WEB-ACTIVEX Microsoft.DbgClr.DTE.8.0 ActiveX clsid access (web-activex.rules)
 * 1:8369 <-> ENABLED <-> WEB-ACTIVEX WMIScriptUtils.WMIObjectBroker2.1 ActiveX clsid access (web-activex.rules)
 * 1:7910 <-> ENABLED <-> WEB-ACTIVEX DXImageTransform.Microsoft.DropShadow ActiveX clsid access (web-activex.rules)
 * 1:8371 <-> ENABLED <-> WEB-ACTIVEX Outlook.Application ActiveX clsid access (web-activex.rules)
 * 1:8373 <-> ENABLED <-> WEB-ACTIVEX VsmIDE.DTE ActiveX clsid access (web-activex.rules)
 * 1:8375 <-> ENABLED <-> WEB-ACTIVEX QuickTime Object ActiveX clsid access (web-activex.rules)
 * 1:8377 <-> DISABLED <-> WEB-ACTIVEX RealPlayer Download Handler ActiveX clsid access (web-activex.rules)
 * 1:8379 <-> ENABLED <-> WEB-ACTIVEX Xml2Dex ActiveX clsid access (web-activex.rules)
 * 1:7912 <-> ENABLED <-> WEB-ACTIVEX DX3DTransform.Microsoft.Shapes ActiveX clsid access (web-activex.rules)
 * 1:8381 <-> DISABLED <-> WEB-ACTIVEX RealPlayer SMIL Download Handler ActiveX clsid access (web-activex.rules)
 * 1:8383 <-> DISABLED <-> WEB-ACTIVEX RealPlayer RAM Download Handler ActiveX clsid access (web-activex.rules)
 * 1:8385 <-> DISABLED <-> WEB-ACTIVEX RealPlayer Playback Handler ActiveX clsid access (web-activex.rules)
 * 1:7914 <-> ENABLED <-> WEB-ACTIVEX DXImageTransform.Microsoft.NDFXArtEffects ActiveX clsid access (web-activex.rules)
 * 1:8389 <-> DISABLED <-> WEB-ACTIVEX RealPlayer RMP Download Handler ActiveX clsid access (web-activex.rules)
 * 1:8391 <-> ENABLED <-> WEB-ACTIVEX RFXInstMgr Class ActiveX clsid access (web-activex.rules)
 * 1:8393 <-> ENABLED <-> WEB-ACTIVEX WebDetectFrm ActiveX clsid access (web-activex.rules)
 * 1:8395 <-> ENABLED <-> WEB-ACTIVEX DX3DTransform.Microsoft.CrShatter ActiveX clsid access (web-activex.rules)
 * 1:8397 <-> ENABLED <-> WEB-ACTIVEX Microsoft Office List 11.0 ActiveX clsid access (web-activex.rules)
 * 1:7916 <-> ENABLED <-> WEB-ACTIVEX CLSID_IMimeInternational ActiveX clsid access (web-activex.rules)
 * 1:8399 <-> ENABLED <-> WEB-ACTIVEX Microsoft.WebCapture ActiveX clsid access (web-activex.rules)
 * 1:8401 <-> ENABLED <-> WEB-ACTIVEX Windows Media Services DRM Storage ActiveX clsid access (web-activex.rules)
 * 1:8403 <-> DISABLED <-> WEB-ACTIVEX XML Schema Cache 6.0 ActiveX clsid access (web-activex.rules)
 * 1:7918 <-> ENABLED <-> WEB-ACTIVEX CoAxTrackVideo Class ActiveX clsid access (web-activex.rules)
 * 1:8405 <-> DISABLED <-> WEB-ACTIVEX  ActiveX clsid access (web-activex.rules)
 * 1:8407 <-> ENABLED <-> WEB-ACTIVEX VisualExec Control ActiveX clsid access (web-activex.rules)
 * 1:8409 <-> DISABLED <-> WEB-ACTIVEX RealPlayer Stream Handler ActiveX clsid access (web-activex.rules)
 * 1:8411 <-> ENABLED <-> WEB-ACTIVEX DocFind Command ActiveX clsid access (web-activex.rules)
 * 1:8417 <-> DISABLED <-> WEB-ACTIVEX TriEditDocument.TriEditDocument ActiveX function call access (web-activex.rules)
 * 1:7920 <-> ENABLED <-> WEB-ACTIVEX DsPropertyPages.OU ActiveX clsid access (web-activex.rules)
 * 1:8421 <-> DISABLED <-> WEB-ACTIVEX OWC11.DataSourceControl.11 ActiveX function call access (web-activex.rules)
 * 1:8422 <-> DISABLED <-> WEB-ACTIVEX Outlook View OVCtl ActiveX clsid access (web-activex.rules)
 * 1:8423 <-> ENABLED <-> WEB-ACTIVEX CEnroll.CEnroll.2 ActiveX function call access (web-activex.rules)
 * 1:8717 <-> ENABLED <-> WEB-ACTIVEX VsaIDE.DTE ActiveX clsid access (web-activex.rules)
 * 1:8719 <-> ENABLED <-> WEB-ACTIVEX VisualStudio.DTE.8.0 ActiveX clsid access (web-activex.rules)
 * 1:8721 <-> ENABLED <-> WEB-ACTIVEX Outlook Data Object ActiveX clsid access (web-activex.rules)
 * 1:8725 <-> ENABLED <-> WEB-ACTIVEX System Monitor ActiveX clsid access (web-activex.rules)
 * 1:8735 <-> ENABLED <-> WEB-ACTIVEX BOWebAgent.Webagent.1 ActiveX clsid access (web-activex.rules)
 * 1:8737 <-> DISABLED <-> WEB-ACTIVEX BOWebAgent.Webagent.1 ActiveX function call access (web-activex.rules)
 * 1:8740 <-> DISABLED <-> WEB-ACTIVEX Macrovision InstallShield Update Service ActiveX function call access (web-activex.rules)
 * 1:8741 <-> ENABLED <-> WEB-ACTIVEX DirectAnimation.DAFontStyle.1 ActiveX clsid access (web-activex.rules)
 * 1:8744 <-> ENABLED <-> WEB-ACTIVEX DirectAnimation.DAEvent.1 ActiveX clsid access (web-activex.rules)
 * 1:8747 <-> ENABLED <-> WEB-ACTIVEX DirectAnimation.DAEndStyle.1 ActiveX clsid access (web-activex.rules)
 * 1:8750 <-> ENABLED <-> WEB-ACTIVEX LM.LMBehaviorFactory.1 ActiveX clsid access (web-activex.rules)
 * 1:8753 <-> ENABLED <-> WEB-ACTIVEX LM.AutoEffectBvr.1 ActiveX clsid access (web-activex.rules)
 * 1:8756 <-> ENABLED <-> WEB-ACTIVEX DirectAnimation.SpriteControl ActiveX clsid access (web-activex.rules)
 * 1:8759 <-> ENABLED <-> WEB-ACTIVEX DirectAnimation.SequencerControl ActiveX clsid access (web-activex.rules)
 * 1:8762 <-> ENABLED <-> WEB-ACTIVEX DirectAnimation.Sequence ActiveX clsid access (web-activex.rules)
 * 1:8765 <-> ENABLED <-> WEB-ACTIVEX DirectAnimation.DAView.1 ActiveX clsid access (web-activex.rules)
 * 1:8768 <-> ENABLED <-> WEB-ACTIVEX DirectAnimation.DAVector3.1 ActiveX clsid access (web-activex.rules)
 * 1:8771 <-> ENABLED <-> WEB-ACTIVEX DirectAnimation.DAVector2.1 ActiveX clsid access (web-activex.rules)
 * 1:8774 <-> ENABLED <-> WEB-ACTIVEX DirectAnimation.DAUserData.1 ActiveX clsid access (web-activex.rules)
 * 1:8777 <-> ENABLED <-> WEB-ACTIVEX DirectAnimation.DATransform3.1 ActiveX clsid access (web-activex.rules)
 * 1:8780 <-> ENABLED <-> WEB-ACTIVEX DirectAnimation.DATransform2.1 ActiveX clsid access (web-activex.rules)
 * 1:8783 <-> ENABLED <-> WEB-ACTIVEX DirectAnimation.DAString.1 ActiveX clsid access (web-activex.rules)
 * 1:8786 <-> ENABLED <-> WEB-ACTIVEX DirectAnimation.DASound.1 ActiveX clsid access (web-activex.rules)
 * 1:8789 <-> ENABLED <-> WEB-ACTIVEX DirectAnimation.DAPoint3.1 ActiveX clsid access (web-activex.rules)
 * 1:8792 <-> ENABLED <-> WEB-ACTIVEX DirectAnimation.DAPoint2.1 ActiveX clsid access (web-activex.rules)
 * 1:8795 <-> ENABLED <-> WEB-ACTIVEX DirectAnimation.DAPath2.1 ActiveX clsid access (web-activex.rules)
 * 1:8798 <-> ENABLED <-> WEB-ACTIVEX DirectAnimation.DAPair.1 ActiveX clsid access (web-activex.rules)
 * 1:8801 <-> ENABLED <-> WEB-ACTIVEX DirectAnimation.DANumber.1 ActiveX clsid access (web-activex.rules)
 * 1:8804 <-> ENABLED <-> WEB-ACTIVEX DirectAnimation.DAMontage.1 ActiveX clsid access (web-activex.rules)
 * 1:8807 <-> ENABLED <-> WEB-ACTIVEX DirectAnimation.DAMicrophone.1 ActiveX clsid access (web-activex.rules)
 * 1:8810 <-> ENABLED <-> WEB-ACTIVEX DirectAnimation.DAMatte.1 ActiveX clsid access (web-activex.rules)
 * 1:8813 <-> ENABLED <-> WEB-ACTIVEX DirectAnimation.DALineStyle.1 ActiveX clsid access (web-activex.rules)
 * 1:8816 <-> ENABLED <-> WEB-ACTIVEX DirectAnimation.DAJoinStyle.1 ActiveX clsid access (web-activex.rules)
 * 1:8819 <-> ENABLED <-> WEB-ACTIVEX DirectAnimation.DAImage.1 ActiveX clsid access (web-activex.rules)
 * 1:8822 <-> ENABLED <-> WEB-ACTIVEX DirectAnimation.DAGeometry.1 ActiveX clsid access (web-activex.rules)
 * 1:8825 <-> ENABLED <-> WEB-ACTIVEX DirectAnimation.DADashStyle.1 ActiveX clsid access (web-activex.rules)
 * 1:8828 <-> ENABLED <-> WEB-ACTIVEX DirectAnimation.DAColor.1 ActiveX clsid access (web-activex.rules)
 * 1:8831 <-> ENABLED <-> WEB-ACTIVEX DirectAnimation.DACamera.1 ActiveX clsid access (web-activex.rules)
 * 1:8834 <-> ENABLED <-> WEB-ACTIVEX DirectAnimation.DABoolean.1 ActiveX clsid access (web-activex.rules)
 * 1:8837 <-> ENABLED <-> WEB-ACTIVEX DirectAnimation.DABbox3.1 ActiveX clsid access (web-activex.rules)
 * 1:8840 <-> ENABLED <-> WEB-ACTIVEX DirectAnimation.DABbox2.1 ActiveX clsid access (web-activex.rules)
 * 1:8843 <-> ENABLED <-> WEB-ACTIVEX DirectAnimation.DAArray.1 ActiveX clsid access (web-activex.rules)
 * 1:8846 <-> ENABLED <-> WEB-ACTIVEX Microsoft Agent Character Custom Proxy Class ActiveX clsid access (web-activex.rules)
 * 1:8848 <-> ENABLED <-> WEB-ACTIVEX Microsoft Agent Notify Sink Custom Proxy Class ActiveX clsid access (web-activex.rules)
 * 1:8850 <-> ENABLED <-> WEB-ACTIVEX Microsoft Agent Custom Proxy Class ActiveX clsid access (web-activex.rules)
 * 1:8852 <-> ENABLED <-> WEB-ACTIVEX Microsoft Agent v2.0 ActiveX clsid access (web-activex.rules)
 * 1:9427 <-> ENABLED <-> WEB-ACTIVEX Acer LunchApp.APlunch ActiveX clsid access (web-activex.rules)
 * 1:9626 <-> DISABLED <-> WEB-ACTIVEX AcroPDF.PDF ActiveX clsid access (web-activex.rules)
 * 1:9629 <-> DISABLED <-> WEB-ACTIVEX Citrix.ICAClient ActiveX clsid access (web-activex.rules)
 * 1:9631 <-> DISABLED <-> WEB-ACTIVEX Citrix.ICAClient ActiveX function call access (web-activex.rules)
 * 1:9668 <-> ENABLED <-> WEB-ACTIVEX Outlook Recipient Control ActiveX clsid access (web-activex.rules)
 * 1:9670 <-> DISABLED <-> WEB-ACTIVEX Outlook Recipient Control ActiveX function call access (web-activex.rules)
 * 1:9671 <-> ENABLED <-> WEB-ACTIVEX RealPlayer AutoStream.AutoStream.1 ActiveX clsid access (web-activex.rules)
 * 1:9673 <-> DISABLED <-> WEB-ACTIVEX RealPlayer AutoStream.AutoStream.1 ActiveX function call access (web-activex.rules)
 * 1:9793 <-> DISABLED <-> WEB-ACTIVEX YMMAPI.YMailAttach ActiveX clsid access (web-activex.rules)
 * 1:9795 <-> ENABLED <-> WEB-ACTIVEX Panda ActiveScan ActiveScan.1 ActiveX clsid access (web-activex.rules)
 * 1:9797 <-> DISABLED <-> WEB-ACTIVEX Panda ActiveScan ActiveScan.1 ActiveX function call access (web-activex.rules)
 * 1:9798 <-> ENABLED <-> WEB-ACTIVEX Panda ActiveScan PAVPZ.SOS.1 ActiveX clsid access (web-activex.rules)
 * 1:9800 <-> DISABLED <-> WEB-ACTIVEX Panda ActiveScan PAVPZ.SOS.1 ActiveX function call access (web-activex.rules)
 * 1:9812 <-> DISABLED <-> WEB-ACTIVEX Yahoo Messenger YMailAttach ActiveX function call access (web-activex.rules)
 * 1:9814 <-> DISABLED <-> WEB-ACTIVEX ICQPhone.SipxPhoneManager ActiveX clsid access (web-activex.rules)
 * 1:11975 <-> DISABLED <-> VOIP-SIP-UDP Via header missing SIP field (voip.rules)
 * 1:12178 <-> DISABLED <-> VOIP-SIP-UDP inbound 481 Call/Leg Transaction Does Not Exist (voip.rules)
 * 1:14608 <-> DISABLED <-> VOIP-SDP-UDP T.38 fax rate management attribute buffer overflow attempt (voip.rules)
 * 1:14609 <-> DISABLED <-> VOIP-SDP-UDP T.38 fax EC attribute buffer overflow attempt (voip.rules)
 * 1:12682 <-> DISABLED <-> VOIP-SIP-TCP From header field buffer overflow attempt (voip.rules)
 * 1:13664 <-> DISABLED <-> VOIP-SIP-UDP Remote-Party-ID header hexadecimal characters in IP address field (voip.rules)
 * 1:14038 <-> DISABLED <-> WEB-ACTIVEX Novell iPrint ActiveX target-frame parameter overflow attempt (web-activex.rules)
 * 1:16351 <-> DISABLED <-> VOIP-SIP-TCP CSeq buffer overflow attempt (voip.rules)
 * 1:11970 <-> DISABLED <-> VOIP-SIP-UDP Cisco 7940/7960 INVITE Remote-Party-ID header denial of service attempt (voip.rules)
 * 1:12359 <-> DISABLED <-> VOIP-SKINNY-TCP Asterisk data length field overflow attempt (voip.rules)
 * 1:12179 <-> DISABLED <-> VOIP-SIP-UDP outbound 481 Call/Leg Transaction Does Not Exist (voip.rules)
 * 1:16511 <-> ENABLED <-> WEB-ACTIVEX Microsoft Tabular Control ActiveX overflow by ProgID  (web-activex.rules)
 * 1:15671 <-> DISABLED <-> WEB-ACTIVEX Microsoft Video 6 ActiveX function call (web-activex.rules)
 * 1:13590 <-> DISABLED <-> VOIP-SIP-UDP OPTIONS message Call-ID header request misplaced - after terminating newline (voip.rules)
 * 1:12681 <-> DISABLED <-> VOIP-SIP-TCP SIP URI overflow attempt (voip.rules)
 * 1:16510 <-> ENABLED <-> WEB-ACTIVEX Microsoft Tabular Control ActiveX overflow by CLSID  (web-activex.rules)
 * 1:11971 <-> DISABLED <-> VOIP-SIP-UDP CSeq buffer overflow attempt (voip.rules)
 * 1:12181 <-> DISABLED <-> VOIP-SIP-UDP outbound 404 Not Found (voip.rules)
 * 1:12683 <-> DISABLED <-> VOIP-SIP-UDP From header field buffer overflow attempt (voip.rules)
 * 1:13693 <-> DISABLED <-> VOIP-SDP-UDP Attribute header rtpmap field invalid payload type (voip.rules)
 * 1:11976 <-> DISABLED <-> VOIP-SIP-UDP SIP URI type overflow attempt (voip.rules)
 * 1:12177 <-> DISABLED <-> VOIP-SIP-UDP outbound 415 Unsupported Media Type message (voip.rules)
 * 1:12180 <-> DISABLED <-> VOIP-SIP-UDP inbound 404 Not Found (voip.rules)
 * 1:11979 <-> DISABLED <-> VOIP-SDP-UDP Media header port field invalid value (voip.rules)
 * 1:11972 <-> DISABLED <-> VOIP-SIP-UDP Max-Forwards value over 70 (voip.rules)
 * 1:11977 <-> DISABLED <-> VOIP-SIP-UDP TEL URI type overflow attempt (voip.rules)
 * 1:12680 <-> DISABLED <-> VOIP-SIP-TCP Via header hostname buffer overflow attempt (voip.rules)
 * 1:14037 <-> DISABLED <-> WEB-ACTIVEX Novell iPrint ActiveX operation or printer-url parameter overflow attempt (web-activex.rules)
 * 1:12270 <-> ENABLED <-> WEB-ACTIVEX Microsoft Visual Basic 6 TLIApplication ActiveX function call (web-activex.rules)
 * 1:11973 <-> DISABLED <-> VOIP-SIP-UDP Via header hostname buffer overflow attempt (voip.rules)
 * 1:12001 <-> DISABLED <-> VOIP-SDP-UDP Version header overflow attempt (voip.rules)
 * 1:12113 <-> DISABLED <-> VOIP-SIP-UDP SIP URI overflow attempt (voip.rules)
 * 1:11984 <-> DISABLED <-> VOIP-SDP-UDP Time header contains long value (voip.rules)
 * 1:12005 <-> DISABLED <-> VOIP-SDP-TCP Connection header invalid value (voip.rules)
 * 1:12170 <-> DISABLED <-> VOIP-SIP-UDP inbound 408 Request Timeout message (voip.rules)
 * 1:12173 <-> DISABLED <-> VOIP-SIP-UDP outbound 501 Not Implemented message (voip.rules)
 * 1:12073 <-> DISABLED <-> VOIP-SIP-UDP inbound 100 Trying message (voip.rules)
 * 1:12004 <-> DISABLED <-> VOIP-SIP-UDP INVITE message Content-Length header size of zero (voip.rules)
 * 1:11982 <-> DISABLED <-> VOIP-SIP-UDP To header contains recursive URL-encoded data (voip.rules)
 * 1:11980 <-> DISABLED <-> VOIP-SDP-UDP Attribute header buffer overflow attempt (voip.rules)
 * 1:12006 <-> DISABLED <-> VOIP-SIP-UDP outbound INVITE message (voip.rules)
 * 1:12003 <-> DISABLED <-> VOIP-SIP-UDP CANCEL flood (voip.rules)
 * 1:12112 <-> DISABLED <-> VOIP-SIP-UDP Sivus scanner detected (voip.rules)
 * 1:12007 <-> DISABLED <-> VOIP-SIP-UDP outbound 401 Unauthorized message (voip.rules)
 * 1:12002 <-> DISABLED <-> VOIP-SIP-UDP BYE flood (voip.rules)
 * 1:12175 <-> DISABLED <-> VOIP-SIP-UDP outbound 604 Does Not Exist Anywhere message (voip.rules)
 * 1:12171 <-> DISABLED <-> VOIP-SIP-UDP outbound 408 Request Timeout message (voip.rules)
 * 1:12167 <-> DISABLED <-> VOIP-SIP-UDP SIP URI multiple at signs in message (voip.rules)
 * 1:12074 <-> DISABLED <-> VOIP-SIP-UDP outbound 100 Trying message (voip.rules)
 * 1:12172 <-> DISABLED <-> VOIP-SIP-UDP inbound 501 Not Implemented message (voip.rules)
 * 1:12174 <-> DISABLED <-> VOIP-SIP-UDP inbound 604 Does Not Exist Anywhere message (voip.rules)
 * 1:11983 <-> DISABLED <-> VOIP-SDP-UDP Time header contains negative value (voip.rules)
 * 1:12176 <-> DISABLED <-> VOIP-SIP-UDP inbound 415 Unsupported Media Type message (voip.rules)
 * 1:11981 <-> DISABLED <-> VOIP-SIP-UDP MultiTech INVITE message buffer overflow attempt (voip.rules)
 * 1:11996 <-> DISABLED <-> VOIP-SIP-UDP CSeq header invalid characters detected (voip.rules)
 * 1:12000 <-> DISABLED <-> VOIP-SIP-UDP INVITE message invalid IP address (voip.rules)
 * 1:11995 <-> DISABLED <-> VOIP-SIP-UDP Content-Type header invalid characters detected (voip.rules)
 * 1:11991 <-> DISABLED <-> VOIP-SIP-UDP CSeq header format string attempt (voip.rules)
 * 1:11992 <-> DISABLED <-> VOIP-SIP-UDP Content-Type header format string attempt (voip.rules)
 * 1:11987 <-> DISABLED <-> VOIP-SIP-UDP Via header format string attempt (voip.rules)
 * 1:11999 <-> DISABLED <-> VOIP-SIP-UDP Via header invalid characters detected (voip.rules)
 * 1:11988 <-> DISABLED <-> VOIP-SIP-UDP From header format string attempt (voip.rules)
 * 1:11985 <-> DISABLED <-> VOIP-SIP-UDP Expires header overflow attempt (voip.rules)
 * 1:11989 <-> DISABLED <-> VOIP-SIP-UDP Call-ID header format string attempt (voip.rules)
 * 1:11986 <-> DISABLED <-> VOIP-SIP-UDP Authorization header invalid characters in response parameter (voip.rules)
 * 1:11998 <-> DISABLED <-> VOIP-SIP-UDP To header invalid characters detected (voip.rules)
 * 1:11994 <-> DISABLED <-> VOIP-SIP-UDP Contact header invalid characters detected (voip.rules)
 * 1:11997 <-> DISABLED <-> VOIP-SIP-UDP From header invalid characters detected (voip.rules)
 * 1:11993 <-> DISABLED <-> VOIP-SIP-UDP Call-ID header invalid characters detected (voip.rules)
 * 1:11990 <-> DISABLED <-> VOIP-SIP-UDP Contact header format string attempt (voip.rules)
 * 1:8013 <-> ENABLED <-> WEB-ACTIVEX French_French Stemmer ActiveX clsid access (web-activex.rules)
 * 1:8005 <-> ENABLED <-> WEB-ACTIVEX DiskManagement.Connection ActiveX clsid access (web-activex.rules)
 * 1:18199 <-> ENABLED <-> WEB-ACTIVEX Microsoft COleSite ActiveX memory corruption attempt  (web-activex.rules)
 * 1:18491 <-> ENABLED <-> WEB-ACTIVEX Whale Client Components ActiveX ProgID access (web-activex.rules)
 * 1:19086 <-> ENABLED <-> WEB-ACTIVEX LEADTOOLS Raster Twain LtocxTwainu.dll ActiveX function call (web-activex.rules)
 * 1:19301 <-> DISABLED <-> VOIP-SIP-UDP Expires header invalid characters detected (voip.rules)
 * 1:19302 <-> DISABLED <-> VOIP-SIP-UDP Max-Forwards header invalid characters detected (voip.rules)
 * 1:19333 <-> DISABLED <-> VOIP-SIP-UDP Content-Type header invalid format too many slashes (voip.rules)
 * 1:19334 <-> DISABLED <-> VOIP-SIP-TCP Content-Type header invalid format too many slashes (voip.rules)
 * 1:19335 <-> DISABLED <-> VOIP-SIP-UDP Content-Type header invalid format missing slash (voip.rules)
 * 1:19336 <-> DISABLED <-> VOIP-SIP-TCP Content-Type header invalid format missing slash (voip.rules)
 * 1:19337 <-> DISABLED <-> VOIP-SIP-UDP invalid SIP-Version field (voip.rules)
 * 1:19338 <-> DISABLED <-> VOIP-SIP-TCP invalid SIP-Version field (voip.rules)
 * 1:19364 <-> DISABLED <-> VOIP-SDP-UDP Time Stop header invalid value (voip.rules)
 * 1:19365 <-> DISABLED <-> VOIP-SDP-TCP Time Stop Header invalid value (voip.rules)
 * 1:19373 <-> DISABLED <-> VOIP-SDP-UDP Origin header overflow attempt (voip.rules)
 * 1:19374 <-> DISABLED <-> VOIP-SDP-TCP Origin header overflow attempt (voip.rules)
 * 1:19375 <-> DISABLED <-> VOIP-SDP-UDP Origin header format string attempt (voip.rules)
 * 1:19376 <-> DISABLED <-> VOIP-SDP-TCP Origin header format string attempt (voip.rules)
 * 1:19377 <-> DISABLED <-> VOIP-SDP-UDP Origin invalid header (voip.rules)
 * 1:19378 <-> DISABLED <-> VOIP-SDP-TCP Origin invalid header (voip.rules)
 * 1:19379 <-> DISABLED <-> VOIP-SDP-UDP Session Name header overflow attempt (voip.rules)
 * 1:19380 <-> DISABLED <-> VOIP-SDP-TCP Session Name header overflow attempt (voip.rules)
 * 1:19381 <-> DISABLED <-> VOIP-SDP-UDP Session Name header format string attempt (voip.rules)
 * 1:19382 <-> DISABLED <-> VOIP-SDP-TCP Session Name header format string attempt (voip.rules)
 * 1:19383 <-> DISABLED <-> VOIP-SDP-UDP Session Name invalid header attempt (voip.rules)
 * 1:19384 <-> DISABLED <-> VOIP-SDP-TCP Session Name invalid header attempt (voip.rules)
 * 1:19385 <-> DISABLED <-> VOIP-SDP-UDP Media header description field overflow attempt (voip.rules)
 * 1:19386 <-> DISABLED <-> VOIP-SDP-TCP Media header description field overflow attempt (voip.rules)
 * 1:19387 <-> DISABLED <-> VOIP-SDP-UDP Media header description field format string attempt (voip.rules)
 * 1:19388 <-> DISABLED <-> VOIP-SDP-TCP Media header description field format string attempt (voip.rules)
 * 1:19389 <-> DISABLED <-> VOIP-SIP-UDP REGISTER flood (voip.rules)
 * 1:19409 <-> DISABLED <-> VOIP-SIP-UDP INVITE message URI contains global broadcast address (voip.rules)
 * 1:19410 <-> DISABLED <-> VOIP-SIP-TCP INVITE message URI contains global broadcast address (voip.rules)
 * 1:4145 <-> ENABLED <-> WEB-ACTIVEX Windows Trouble Shooter ActiveX object access (web-activex.rules)
 * 1:4146 <-> ENABLED <-> WEB-ACTIVEX Share Point Portal Services Log Sink ActiveX object access (web-activex.rules)
 * 1:4148 <-> DISABLED <-> WEB-ACTIVEX DHTML Editing ActiveX clsid access (web-activex.rules)
 * 1:4151 <-> ENABLED <-> WEB-ACTIVEX System Monitor Source Properties ActiveX object access (web-activex.rules)
 * 1:4152 <-> ENABLED <-> WEB-ACTIVEX Windows Media Player 6.4 ActiveX object access (web-activex.rules)
 * 1:4153 <-> ENABLED <-> WEB-ACTIVEX Eyedog ActiveX object access (web-activex.rules)
 * 1:4155 <-> ENABLED <-> WEB-ACTIVEX htmlfile ActiveX object access (web-activex.rules)
 * 1:4156 <-> ENABLED <-> WEB-ACTIVEX Windows Media Player 7+ ActiveX object access (web-activex.rules)
 * 1:4157 <-> ENABLED <-> WEB-ACTIVEX MSN Setup BBS 4.71.0.10 ActiveX object access (web-activex.rules)
 * 1:4158 <-> ENABLED <-> WEB-ACTIVEX Windows Media Player Active Movie ActiveX object access (web-activex.rules)
 * 1:4160 <-> ENABLED <-> WEB-ACTIVEX Microsoft Windows Reporting Tool ActiveX object access (web-activex.rules)
 * 1:4161 <-> ENABLED <-> WEB-ACTIVEX DigWebX MSN ActiveX object access (web-activex.rules)
 * 1:4162 <-> ENABLED <-> WEB-ACTIVEX DigWebX MSN ActiveX object access (web-activex.rules)
 * 1:4163 <-> ENABLED <-> WEB-ACTIVEX DigWebX MSN ActiveX object access (web-activex.rules)
 * 1:4165 <-> ENABLED <-> WEB-ACTIVEX Image Control 1.0 ActiveX object access (web-activex.rules)
 * 1:4167 <-> DISABLED <-> WEB-ACTIVEX MSN Heartbeat ActiveX clsid access (web-activex.rules)
 * 1:4168 <-> ENABLED <-> WEB-ACTIVEX Shell Automation Service ActiveX object access (web-activex.rules)
 * 1:4169 <-> ENABLED <-> WEB-ACTIVEX Internet Explorer Active Setup ActiveX object access (web-activex.rules)
 * 1:4172 <-> ENABLED <-> WEB-ACTIVEX Microsoft Agent v1.5 ActiveX clsid access (web-activex.rules)
 * 1:4173 <-> ENABLED <-> WEB-ACTIVEX MsnPUpld ActiveX object access (web-activex.rules)
 * 1:4174 <-> ENABLED <-> WEB-ACTIVEX Symantec RuFSI registry Information Class ActiveX object access (web-activex.rules)
 * 1:4175 <-> ENABLED <-> WEB-ACTIVEX Office 2000/2002 Web Components PivotTable ActiveX object access (web-activex.rules)
 * 1:4178 <-> ENABLED <-> WEB-ACTIVEX Office 2000 and 2002 Web Components Record Navigation Control ActiveX object access (web-activex.rules)
 * 1:4179 <-> ENABLED <-> WEB-ACTIVEX DirectX Files Viewer ActiveX object access (web-activex.rules)
 * 1:4180 <-> ENABLED <-> WEB-ACTIVEX Kodak Image Scan Control ActiveX object access (web-activex.rules)
 * 1:4181 <-> ENABLED <-> WEB-ACTIVEX Smartcard Enrollment ActiveX object access (web-activex.rules)
 * 1:4183 <-> ENABLED <-> WEB-ACTIVEX HTML Help ActiveX object access (web-activex.rules)
 * 1:4184 <-> ENABLED <-> WEB-ACTIVEX Certificate Enrollment ActiveX object access (web-activex.rules)
 * 1:4185 <-> ENABLED <-> WEB-ACTIVEX Terminal Services Advanced Client ActiveX object access (web-activex.rules)
 * 1:4186 <-> ENABLED <-> WEB-ACTIVEX Kodak Image Editing ActiveX object access (web-activex.rules)
 * 1:4188 <-> ENABLED <-> WEB-ACTIVEX RAV Online Scanner ActiveX object access (web-activex.rules)
 * 1:4189 <-> ENABLED <-> WEB-ACTIVEX Third-Party Plugin ActiveX object access (web-activex.rules)
 * 1:4190 <-> ENABLED <-> WEB-ACTIVEX Kodak Thumbnail Image ActiveX object access (web-activex.rules)
 * 1:4191 <-> ENABLED <-> WEB-ACTIVEX MsnPUpld ActiveX object access (web-activex.rules)
 * 1:4193 <-> ENABLED <-> WEB-ACTIVEX Kodak Image Editing ActiveX object access (web-activex.rules)
 * 1:4197 <-> ENABLED <-> WEB-ACTIVEX DigWebX MSN ActiveX object access (web-activex.rules)
 * 1:4198 <-> ENABLED <-> WEB-ACTIVEX Internet Explorer Blnmgrps.dll ActiveX object access (web-activex.rules)
 * 1:4199 <-> ENABLED <-> WEB-ACTIVEX Internet Explorer Blnmgrps.dll ActiveX object access (web-activex.rules)
 * 1:4201 <-> ENABLED <-> WEB-ACTIVEX Queued Components Recorder ActiveX object access (web-activex.rules)
 * 1:4202 <-> ENABLED <-> WEB-ACTIVEX DirectAnimation ActiveX object access (web-activex.rules)
 * 1:4203 <-> ENABLED <-> WEB-ACTIVEX Microsoft Marquee Control ActiveX object access (web-activex.rules)
 * 1:4204 <-> ENABLED <-> WEB-ACTIVEX Microsoft DT PolyLine Control 2 ActiveX object access (web-activex.rules)
 * 1:4206 <-> ENABLED <-> WEB-ACTIVEX Microsoft MPEG-4 Video Decompressor Property Page ActiveX object access (web-activex.rules)
 * 1:4207 <-> ENABLED <-> WEB-ACTIVEX Microsoft MS Audio Decompressor Control Property Page ActiveX object access (web-activex.rules)
 * 1:4208 <-> ENABLED <-> WEB-ACTIVEX LexRefStEsObject Class ActiveX object access (web-activex.rules)
 * 1:4209 <-> ENABLED <-> WEB-ACTIVEX LexRefStFrObject Class ActiveX object access (web-activex.rules)
 * 1:4211 <-> ENABLED <-> WEB-ACTIVEX Microsoft DDS Library Shape Control ActiveX object access (web-activex.rules)
 * 1:4212 <-> ENABLED <-> WEB-ACTIVEX Microsoft DDS Generic Class ActiveX object access (web-activex.rules)
 * 1:4213 <-> ENABLED <-> WEB-ACTIVEX Microsoft DDS Picture Shape Control ActiveX object access (web-activex.rules)
 * 1:4214 <-> ENABLED <-> WEB-ACTIVEX Microsoft TipGW Init ActiveX object access (web-activex.rules)
 * 1:4216 <-> ENABLED <-> WEB-ACTIVEX CLSID_CComAcctImport ActiveX object access (web-activex.rules)
 * 1:4217 <-> ENABLED <-> WEB-ACTIVEX Microsoft Office Services on the Web Free/Busy ActiveX object access (web-activex.rules)
 * 1:4218 <-> ENABLED <-> WEB-ACTIVEX Microsoft Visual Basic WebClass ActiveX object access (web-activex.rules)
 * 1:4219 <-> ENABLED <-> WEB-ACTIVEX Microsoft Network Connections Tray ActiveX object access (web-activex.rules)
 * 1:4221 <-> ENABLED <-> WEB-ACTIVEX Microsoft ProxyStub Dispatch ActiveX object access (web-activex.rules)
 * 1:4222 <-> ENABLED <-> WEB-ACTIVEX Internet Explorer Outllib.dll ActiveX object access (web-activex.rules)
 * 1:4223 <-> ENABLED <-> WEB-ACTIVEX Microsoft OpenCable Class ActiveX object access (web-activex.rules)
 * 1:4224 <-> ENABLED <-> WEB-ACTIVEX Microsoft VideoPort ActiveX object access (web-activex.rules)
 * 1:4226 <-> ENABLED <-> WEB-ACTIVEX Microsoft DocHost User Interface Handler ActiveX object access (web-activex.rules)
 * 1:4227 <-> ENABLED <-> WEB-ACTIVEX Microsoft Network Connections ActiveX object access (web-activex.rules)
 * 1:4228 <-> ENABLED <-> WEB-ACTIVEX Microsoft Windows Start Menu ActiveX object access (web-activex.rules)
 * 1:4229 <-> ENABLED <-> WEB-ACTIVEX MSAPP Export Support for Microsoft Access ActiveX object access (web-activex.rules)
 * 1:4231 <-> ENABLED <-> WEB-ACTIVEX Microsoft SysTray ActiveX object access (web-activex.rules)
 * 1:4232 <-> ENABLED <-> WEB-ACTIVEX Microsoft SysTray Invoker ActiveX object access (web-activex.rules)
 * 1:4233 <-> ENABLED <-> WEB-ACTIVEX Microsoft Visual Database Tools Query Designer v7.0 ActiveX object access (web-activex.rules)
 * 1:4234 <-> ENABLED <-> WEB-ACTIVEX Microsoft MSVTDGridCtrl7 ActiveX object access (web-activex.rules)
 * 1:4236 <-> ENABLED <-> WEB-ACTIVEX WMI ASDI Extension ActiveX object access (web-activex.rules)
 * 1:4648 <-> DISABLED <-> WEB-ACTIVEX wang image admin activex object access (web-activex.rules)
 * 1:4676 <-> DISABLED <-> ORACLE Enterprise Manager Application Server Control POST Parameter Overflow Attempt (oracle.rules)
 * 1:4677 <-> DISABLED <-> ORACLE Enterprise Manager Application Server Control GET Parameter Overflow Attempt (oracle.rules)
 * 1:4891 <-> ENABLED <-> WEB-ACTIVEX cfw Class ActiveX object access (web-activex.rules)
 * 1:4892 <-> ENABLED <-> WEB-ACTIVEX MTSEvents Class ActiveX object access (web-activex.rules)
 * 1:4893 <-> ENABLED <-> WEB-ACTIVEX Trident HTMLEditor ActiveX object access (web-activex.rules)
 * 1:4894 <-> ENABLED <-> WEB-ACTIVEX PSEnumVariant ActiveX object access (web-activex.rules)
 * 1:4896 <-> ENABLED <-> WEB-ACTIVEX PSTypeLib ActiveX object access (web-activex.rules)
 * 1:4897 <-> ENABLED <-> WEB-ACTIVEX PSOAInterface ActiveX object access (web-activex.rules)
 * 1:4898 <-> ENABLED <-> WEB-ACTIVEX PSTypeComp ActiveX object access (web-activex.rules)
 * 1:4899 <-> ENABLED <-> WEB-ACTIVEX ISupportErrorInfo Interface ActiveX object access (web-activex.rules)
 * 1:4901 <-> ENABLED <-> WEB-ACTIVEX VMR Allocator Presenter 9 ActiveX object access (web-activex.rules)
 * 1:4902 <-> ENABLED <-> WEB-ACTIVEX Video Mixing Renderer 9 ActiveX object access (web-activex.rules)
 * 1:4903 <-> ENABLED <-> WEB-ACTIVEX VMR ImageSync 9 ActiveX object access (web-activex.rules)
 * 1:4904 <-> ENABLED <-> WEB-ACTIVEX Microsoft Repository Alias ActiveX object access (web-activex.rules)
 * 1:4906 <-> ENABLED <-> WEB-ACTIVEX Microsoft Repository Interface Definition ActiveX object access (web-activex.rules)
 * 1:4907 <-> ENABLED <-> WEB-ACTIVEX Microsoft Repository Collection Definition ActiveX object access (web-activex.rules)
 * 1:4908 <-> ENABLED <-> WEB-ACTIVEX Microsoft Repository Method Definition ActiveX object access (web-activex.rules)
 * 1:4909 <-> ENABLED <-> WEB-ACTIVEX Microsoft Repository Property Definition ActiveX object access (web-activex.rules)
 * 1:4911 <-> ENABLED <-> WEB-ACTIVEX Microsoft Repository Type Library ActiveX object access (web-activex.rules)
 * 1:4912 <-> ENABLED <-> WEB-ACTIVEX Microsoft Repository Root ActiveX object access (web-activex.rules)
 * 1:4913 <-> ENABLED <-> WEB-ACTIVEX Microsoft Repository Workspace ActiveX object access (web-activex.rules)
 * 1:4914 <-> ENABLED <-> WEB-ACTIVEX Microsoft Repository Script Definition ActiveX object access (web-activex.rules)
 * 1:4982 <-> ENABLED <-> WEB-ACTIVEX Adodb.Stream ActiveX object access (web-activex.rules)
 * 1:4983 <-> DISABLED <-> WEB-ACTIVEX Adodb.Stream ActiveX Object Access CreateObject Function (web-activex.rules)
 * 1:6002 <-> ENABLED <-> WEB-ACTIVEX Microsoft DT DDS Rectilinear GDD Layout ActiveX object access (web-activex.rules)
 * 1:6003 <-> ENABLED <-> WEB-ACTIVEX Microsoft DT DDS Rectilinear GDD Route ActiveX object access (web-activex.rules)
 * 1:6005 <-> ENABLED <-> WEB-ACTIVEX Microsoft DT DDS Straight Line Routing Logic 2 ActiveX object access (web-activex.rules)
 * 1:6006 <-> ENABLED <-> WEB-ACTIVEX Microsoft DT Icon Control ActiveX object access (web-activex.rules)
 * 1:6007 <-> ENABLED <-> WEB-ACTIVEX Microsoft DT DDS OrgChart GDD Layout ActiveX object access (web-activex.rules)
 * 1:6008 <-> ENABLED <-> WEB-ACTIVEX Microsoft DT DDS OrgChart GDD Route ActiveX object access (web-activex.rules)
 * 1:6517 <-> ENABLED <-> WEB-ACTIVEX DXImageTransform.Microsoft.Light ActiveX clsid access (web-activex.rules)
 * 1:6681 <-> ENABLED <-> WEB-ACTIVEX Windows Media Transform Effects ActiveX clsid access (web-activex.rules)
 * 1:6684 <-> ENABLED <-> WEB-ACTIVEX DXImageTransform.Microsoft.MMSpecialEffect1Input ActiveX clsid access (web-activex.rules)
 * 1:6686 <-> ENABLED <-> WEB-ACTIVEX DXImageTransform.Microsoft.MMSpecialEffect2Inputs ActiveX clsid access (web-activex.rules)
 * 1:7005 <-> DISABLED <-> WEB-ACTIVEX OutlookExpress.AddressBook ActiveX function call access (web-activex.rules)
 * 1:7006 <-> DISABLED <-> WEB-ACTIVEX ASControls.InstallEngineCtl ActiveX function call access (web-activex.rules)
 * 1:7007 <-> DISABLED <-> WEB-ACTIVEX AxDebugger.Document.1 ActiveX function call access (web-activex.rules)
 * 1:7008 <-> DISABLED <-> WEB-ACTIVEX DirectAnimation.DAUserData ActiveX function call access (web-activex.rules)
 * 1:7011 <-> DISABLED <-> WEB-ACTIVEX HtmlDlgSafeHelper.HtmlDlgSafeHelper ActiveX function call access (web-activex.rules)
 * 1:7012 <-> DISABLED <-> WEB-ACTIVEX Internet.PopupMenu.1 ActiveX function call access (web-activex.rules)
 * 1:7014 <-> DISABLED <-> WEB-ACTIVEX NMSA.ASFSourceMediaDescription.1 ActiveX function call access (web-activex.rules)
 * 1:7015 <-> DISABLED <-> WEB-ACTIVEX NMSA.MediaDescription ActiveX function call access (web-activex.rules)
 * 1:7018 <-> DISABLED <-> WEB-ACTIVEX Sysmon ActiveX function call access (web-activex.rules)
 * 1:7425 <-> ENABLED <-> WEB-ACTIVEX 9x8Resize ActiveX clsid access (web-activex.rules)
 * 1:7427 <-> ENABLED <-> WEB-ACTIVEX Allocator Fix ActiveX clsid access (web-activex.rules)
 * 1:7429 <-> ENABLED <-> WEB-ACTIVEX Bitmap ActiveX clsid access (web-activex.rules)
 * 1:7433 <-> ENABLED <-> WEB-ACTIVEX DirectX Transform Wrapper Property Page ActiveX clsid access (web-activex.rules)
 * 1:7435 <-> ENABLED <-> WEB-ACTIVEX Dynamic Casts ActiveX clsid access (web-activex.rules)
 * 1:7436 <-> ENABLED <-> WEB-ACTIVEX Dynamic Casts ActiveX function call (web-activex.rules)
 * 1:7437 <-> ENABLED <-> WEB-ACTIVEX Frame Eater ActiveX clsid access (web-activex.rules)
 * 1:7444 <-> ENABLED <-> WEB-ACTIVEX Mmedia.AsyncMHandler.1 ActiveX clsid access (web-activex.rules)
 * 1:7446 <-> ENABLED <-> WEB-ACTIVEX Record Queue ActiveX clsid access (web-activex.rules)
 * 1:7448 <-> ENABLED <-> WEB-ACTIVEX ShotDetect ActiveX clsid access (web-activex.rules)
 * 1:7450 <-> ENABLED <-> WEB-ACTIVEX Stetch ActiveX clsid access (web-activex.rules)
 * 1:7454 <-> ENABLED <-> WEB-ACTIVEX Wmm2ae.dll ActiveX clsid access (web-activex.rules)
 * 1:7456 <-> ENABLED <-> WEB-ACTIVEX Wmm2fxa.dll ActiveX clsid access (web-activex.rules)
 * 1:7458 <-> ENABLED <-> WEB-ACTIVEX Wmm2fxb.dll ActiveX clsid access (web-activex.rules)
 * 1:7460 <-> ENABLED <-> WEB-ACTIVEX WMT Audio Analyzer ActiveX clsid access (web-activex.rules)
 * 1:7464 <-> ENABLED <-> WEB-ACTIVEX WMT DeInterlace Filter ActiveX clsid access (web-activex.rules)
 * 1:7466 <-> ENABLED <-> WEB-ACTIVEX WMT DeInterlace Prop Page ActiveX clsid access (web-activex.rules)
 * 1:7468 <-> ENABLED <-> WEB-ACTIVEX WMT DirectX Transform Wrapper ActiveX clsid access (web-activex.rules)
 * 1:7470 <-> ENABLED <-> WEB-ACTIVEX WMT DV Extract Filter ActiveX clsid access (web-activex.rules)
 * 1:7474 <-> ENABLED <-> WEB-ACTIVEX WMT FormatConversion ActiveX clsid access (web-activex.rules)
 * 1:7476 <-> ENABLED <-> WEB-ACTIVEX WMT Import Filter ActiveX clsid access (web-activex.rules)
 * 1:7478 <-> ENABLED <-> WEB-ACTIVEX WMT Interlacer ActiveX clsid access (web-activex.rules)
 * 1:7480 <-> ENABLED <-> WEB-ACTIVEX WMT Log Filter ActiveX clsid access (web-activex.rules)
 * 1:7484 <-> ENABLED <-> WEB-ACTIVEX WMT Sample Info Filter ActiveX clsid access (web-activex.rules)
 * 1:7486 <-> ENABLED <-> WEB-ACTIVEX WMT Screen Capture Filter Task Page ActiveX clsid access (web-activex.rules)
 * 1:7922 <-> ENABLED <-> WEB-ACTIVEX DXImageTransform.Microsoft.RevealTrans ActiveX clsid access (web-activex.rules)
 * 1:7924 <-> ENABLED <-> WEB-ACTIVEX DXImageTransform.Microsoft.Shadow ActiveX clsid access (web-activex.rules)
 * 1:7926 <-> ENABLED <-> WEB-ACTIVEX DXTFilter ActiveX clsid access (web-activex.rules)
 * 1:7928 <-> ENABLED <-> WEB-ACTIVEX file or local Asychronous Pluggable Protocol Handler ActiveX clsid access (web-activex.rules)
 * 1:7930 <-> ENABLED <-> WEB-ACTIVEX FolderItem2 ActiveX clsid access (web-activex.rules)
 * 1:7932 <-> ENABLED <-> WEB-ACTIVEX FolderItems3 ActiveX clsid access (web-activex.rules)
 * 1:7934 <-> ENABLED <-> WEB-ACTIVEX ftp Asychronous Pluggable Protocol Handler ActiveX clsid access (web-activex.rules)
 * 1:7936 <-> ENABLED <-> WEB-ACTIVEX DXImageTransform.Microsoft.Glow ActiveX clsid access (web-activex.rules)
 * 1:7938 <-> ENABLED <-> WEB-ACTIVEX gopher Asychronous Pluggable Protocol Handler ActiveX clsid access (web-activex.rules)
 * 1:7940 <-> ENABLED <-> WEB-ACTIVEX DXImageTransform.Microsoft.Gradient ActiveX clsid access (web-activex.rules)
 * 1:7942 <-> ENABLED <-> WEB-ACTIVEX http Asychronous Pluggable Protocol Handler ActiveX clsid access (web-activex.rules)
 * 1:7944 <-> ENABLED <-> WEB-ACTIVEX https Asychronous Pluggable Protocol Handler ActiveX clsid access (web-activex.rules)
 * 1:7946 <-> ENABLED <-> WEB-ACTIVEX DXImageTransform.Microsoft.MaskFilter ActiveX clsid access (web-activex.rules)
 * 1:7948 <-> ENABLED <-> WEB-ACTIVEX Microsoft Common Browser Architecture ActiveX clsid access (web-activex.rules)
 * 1:7950 <-> ENABLED <-> WEB-ACTIVEX Microsoft DirectAnimation Control ActiveX clsid access (web-activex.rules)
 * 1:7952 <-> ENABLED <-> WEB-ACTIVEX Microsoft DirectAnimation Windowed Control ActiveX clsid access (web-activex.rules)
 * 1:7954 <-> ENABLED <-> WEB-ACTIVEX Microsoft Forms 2.0 ComboBox ActiveX clsid access (web-activex.rules)
 * 1:7956 <-> ENABLED <-> WEB-ACTIVEX Microsoft Forms 2.0 ListBox ActiveX clsid access (web-activex.rules)
 * 1:7958 <-> ENABLED <-> WEB-ACTIVEX mk Asychronous Pluggable Protocol Handler ActiveX clsid access (web-activex.rules)
 * 1:7970 <-> ENABLED <-> WEB-ACTIVEX PostBootReminder object ActiveX clsid access (web-activex.rules)
 * 1:7974 <-> ENABLED <-> WEB-ACTIVEX Rendezvous Class ActiveX clsid access (web-activex.rules)
 * 1:7976 <-> ENABLED <-> WEB-ACTIVEX ShellFolder for CD Burning ActiveX clsid access (web-activex.rules)
 * 1:7978 <-> DISABLED <-> WEB-ACTIVEX ShockwaveFlash.ShockwaveFlash ActiveX clsid access (web-activex.rules)
 * 1:7981 <-> DISABLED <-> WEB-ACTIVEX Snapshot Viewer General Property Page Object ActiveX clsid access (web-activex.rules)
 * 1:7983 <-> ENABLED <-> WEB-ACTIVEX SuperBuddy Class ActiveX clsid access (web-activex.rules)
 * 1:7987 <-> ENABLED <-> WEB-ACTIVEX WebViewFolderIcon.WebViewFolderIcon.2 ActiveX clsid access (web-activex.rules)
 * 1:7989 <-> ENABLED <-> WEB-ACTIVEX WIA FileSystem USD ActiveX clsid access (web-activex.rules)
 * 1:7991 <-> ENABLED <-> WEB-ACTIVEX ACM Class Manager ActiveX clsid access (web-activex.rules)
 * 1:7993 <-> ENABLED <-> WEB-ACTIVEX clbcatex.dll ActiveX clsid access (web-activex.rules)
 * 1:7995 <-> ENABLED <-> WEB-ACTIVEX clbcatq.dll ActiveX clsid access (web-activex.rules)
 * 1:7997 <-> ENABLED <-> WEB-ACTIVEX CLSID_ApprenticeICW ActiveX clsid access (web-activex.rules)
 * 1:7999 <-> ENABLED <-> WEB-ACTIVEX CLSID_CDIDeviceActionConfigPage ActiveX clsid access (web-activex.rules)
 * 1:8001 <-> ENABLED <-> WEB-ACTIVEX CommunicationManager ActiveX clsid access (web-activex.rules)
 * 1:8003 <-> ENABLED <-> WEB-ACTIVEX Content.mbcontent.1 ActiveX clsid access (web-activex.rules)