Sourcefire VRT Certified Rules Update
Date: 2005-10-12
This is the complete list of rules modified and added in the Sourcefire VRT Certified rule pack.
The format of the file is:
sid - Message (rule group)
New rules: 4198 - WEB-CLIENT Internet Explorer Blnmgrps.dll ActiveX Object Access (web-client.rules) 4199 - WEB-CLIENT Internet Explorer Blnmgrps.dll ActiveX Object Access (web-client.rules) 4200 - WEB-CLIENT Index Server Scope Administration ActiveX Object Access (web-client.rules) 4201 - WEB-CLIENT Queued Components Recorder ActiveX Object Access (web-client.rules) 4202 - WEB-CLIENT DirectAnimation ActiveX Object Access (web-client.rules) 4203 - WEB-CLIENT Microsoft Marquee Control ActiveX Object Access (web-client.rules) 4204 - WEB-CLIENT Microsoft DT PolyLine Control 2 ActiveX Object Access (web-client.rules) 4205 - WEB-CLIENT Microsoft Visual Database Tools Database Designer v7.0 ActiveX Object Access (web-client.rules) 4206 - WEB-CLIENT Microsoft MPEG-4 Video Decompressor Property Page ActiveX Object Access (web-client.rules) 4207 - WEB-CLIENT Microsoft MS Audio Decompressor Control Property Page ActiveX Object Access (web-client.rules) 4208 - WEB-CLIENT LexRefStEsObject Class ActiveX Object Access (web-client.rules) 4209 - WEB-CLIENT LexRefStFrObject Class ActiveX Object Access (web-client.rules) 4210 - WEB-CLIENT Internet Explorer Msb1geen.dll ActiveX Object Access (web-client.rules) 4211 - WEB-CLIENT Microsoft DDS Library Shape Control ActiveX Object Access (web-client.rules) 4212 - WEB-CLIENT Microsoft DDS Generic Class ActiveX Object Access (web-client.rules) 4213 - WEB-CLIENT Microsoft DDS Picture Shape Control ActiveX Object Access (web-client.rules) 4214 - WEB-CLIENT Microsoft TipGW Init ActiveX Object Access (web-client.rules) 4215 - WEB-CLIENT Microsoft HTML Popup Window ActiveX Object Access (web-client.rules) 4216 - WEB-CLIENT CLSID_CComAcctImport ActiveX Object Access (web-client.rules) 4217 - WEB-CLIENT Microsoft Office Services on the Web Free/Busy ActiveX Object Access (web-client.rules) 4218 - WEB-CLIENT Microsoft Visual Basic WebClass ActiveX Object Access (web-client.rules) 4219 - WEB-CLIENT Microsoft Network Connections Tray ActiveX Object Access (web-client.rules) 4220 - WEB-CLIENT Microsoft Network and Dial-Up Connections ActiveX Object Access (web-client.rules) 4221 - WEB-CLIENT Microsoft ProxyStub Dispatch ActiveX Object Access (web-client.rules) 4222 - WEB-CLIENT Internet Explorer Outllib.dll ActiveX Object Access (web-client.rules) 4223 - WEB-CLIENT Microsoft OpenCable Class ActiveX Object Access (web-client.rules) 4224 - WEB-CLIENT Microsoft VideoPort ActiveX Object Access (web-client.rules) 4225 - WEB-CLIENT Microsoft Repository ActiveX Object Access (web-client.rules) 4226 - WEB-CLIENT Microsoft DocHost User Interface Handler ActiveX Object Access (web-client.rules) 4227 - WEB-CLIENT Microsoft Network Connections ActiveX Object Access (web-client.rules) 4228 - WEB-CLIENT Microsoft Windows Start Menu ActiveX Object Access (web-client.rules) 4229 - WEB-CLIENT MSAPP Export Support for Microsoft Access ActiveX Object Access (web-client.rules) 4230 - WEB-CLIENT Search Assistant UI ActiveX Object Access (web-client.rules) 4231 - WEB-CLIENT Microsoft SysTray ActiveX Object Access (web-client.rules) 4232 - WEB-CLIENT Microsoft SysTray Invoker ActiveX Object Access (web-client.rules) 4233 - WEB-CLIENT Microsoft Visual Database Tools Query Designer v7.0 ActiveX Object Access (web-client.rules) 4234 - WEB-CLIENT Microsoft MSVTDGridCtrl7 ActiveX Object Access (web-client.rules) 4235 - WEB-CLIENT Helper Object for Java ActiveX Object Access (web-client.rules) 4236 - WEB-CLIENT WMI ASDI Extension ActiveX Object Access (web-client.rules) 4237 - NETBIOS DCERPC DIRECT IXnRemote alter context attempt (netbios.rules) 4238 - NETBIOS DCERPC DIRECT IXnRemote bind attempt (netbios.rules) 4239 - NETBIOS DCERPC DIRECT IXnRemote little endian alter context attempt (netbios.rules) 4240 - NETBIOS DCERPC DIRECT IXnRemote little endian bind attempt (netbios.rules) 4241 - NETBIOS DCERPC DIRECT-UDP IXnRemote alter context attempt (netbios.rules) 4242 - NETBIOS DCERPC DIRECT-UDP IXnRemote bind attempt (netbios.rules) 4243 - NETBIOS DCERPC DIRECT-UDP IXnRemote little endian alter context attempt (netbios.rules) 4244 - NETBIOS DCERPC DIRECT-UDP IXnRemote little endian bind attempt (netbios.rules) 4245 - NETBIOS DCERPC DIRECT IXnRemote BuildContextW attempt (netbios.rules) 4246 - NETBIOS DCERPC DIRECT IXnRemote BuildContextW little endian attempt (netbios.rules) 4247 - NETBIOS DCERPC DIRECT v4 IXnRemote BuildContextW attempt (netbios.rules) 4248 - NETBIOS DCERPC DIRECT v4 IXnRemote BuildContextW little endian attempt (netbios.rules) 4249 - NETBIOS DCERPC DIRECT-UDP IXnRemote BuildContextW attempt (netbios.rules) 4250 - NETBIOS DCERPC DIRECT-UDP IXnRemote BuildContextW little endian attempt (netbios.rules) 4251 - NETBIOS DCERPC DIRECT-UDP v4 IXnRemote BuildContextW attempt (netbios.rules) 4252 - NETBIOS DCERPC DIRECT-UDP v4 IXnRemote BuildContextW little endian attempt (netbios.rules) 4253 - NETBIOS SMB umpnpmgr PNP_GetDeviceList WriteAndX andx attempt (netbios.rules) 4254 - NETBIOS SMB umpnpmgr PNP_GetDeviceList WriteAndX attempt (netbios.rules) 4255 - NETBIOS SMB umpnpmgr PNP_GetDeviceList WriteAndX little endian andx attempt (netbios.rules) 4256 - NETBIOS SMB umpnpmgr PNP_GetDeviceList WriteAndX little endian attempt (netbios.rules) 4257 - NETBIOS SMB umpnpmgr PNP_GetDeviceList WriteAndX unicode andx attempt (netbios.rules) 4258 - NETBIOS SMB umpnpmgr PNP_GetDeviceList WriteAndX unicode attempt (netbios.rules) 4259 - NETBIOS SMB umpnpmgr PNP_GetDeviceList WriteAndX unicode little endian andx attempt (netbios.rules) 4260 - NETBIOS SMB umpnpmgr PNP_GetDeviceList WriteAndX unicode little endian attempt (netbios.rules) 4261 - NETBIOS SMB umpnpmgr PNP_GetDeviceList andx attempt (netbios.rules) 4262 - NETBIOS SMB umpnpmgr PNP_GetDeviceList attempt (netbios.rules) 4263 - NETBIOS SMB umpnpmgr PNP_GetDeviceList little endian andx attempt (netbios.rules) 4264 - NETBIOS SMB umpnpmgr PNP_GetDeviceList little endian attempt (netbios.rules) 4265 - NETBIOS SMB umpnpmgr PNP_GetDeviceList unicode andx attempt (netbios.rules) 4266 - NETBIOS SMB umpnpmgr PNP_GetDeviceList unicode attempt (netbios.rules) 4267 - NETBIOS SMB umpnpmgr PNP_GetDeviceList unicode little endian andx attempt (netbios.rules) 4268 - NETBIOS SMB umpnpmgr PNP_GetDeviceList unicode little endian attempt (netbios.rules) 4269 - NETBIOS SMB v4 umpnpmgr PNP_GetDeviceList WriteAndX andx attempt (netbios.rules) 4270 - NETBIOS SMB v4 umpnpmgr PNP_GetDeviceList WriteAndX attempt (netbios.rules) 4271 - NETBIOS SMB v4 umpnpmgr PNP_GetDeviceList WriteAndX little endian andx attempt (netbios.rules) 4272 - NETBIOS SMB v4 umpnpmgr PNP_GetDeviceList WriteAndX little endian attempt (netbios.rules) 4273 - NETBIOS SMB v4 umpnpmgr PNP_GetDeviceList WriteAndX unicode andx attempt (netbios.rules) 4274 - NETBIOS SMB v4 umpnpmgr PNP_GetDeviceList WriteAndX unicode attempt (netbios.rules) 4275 - NETBIOS SMB v4 umpnpmgr PNP_GetDeviceList WriteAndX unicode little endian andx attempt (netbios.rules) 4276 - NETBIOS SMB v4 umpnpmgr PNP_GetDeviceList WriteAndX unicode little endian attempt (netbios.rules) 4277 - NETBIOS SMB v4 umpnpmgr PNP_GetDeviceList andx attempt (netbios.rules) 4278 - NETBIOS SMB v4 umpnpmgr PNP_GetDeviceList attempt (netbios.rules) 4279 - NETBIOS SMB v4 umpnpmgr PNP_GetDeviceList little endian andx attempt (netbios.rules) 4280 - NETBIOS SMB v4 umpnpmgr PNP_GetDeviceList little endian attempt (netbios.rules) 4281 - NETBIOS SMB v4 umpnpmgr PNP_GetDeviceList unicode andx attempt (netbios.rules) 4282 - NETBIOS SMB v4 umpnpmgr PNP_GetDeviceList unicode attempt (netbios.rules) 4283 - NETBIOS SMB v4 umpnpmgr PNP_GetDeviceList unicode little endian andx attempt (netbios.rules) 4284 - NETBIOS SMB v4 umpnpmgr PNP_GetDeviceList unicode little endian attempt (netbios.rules) 4285 - NETBIOS SMB umpnpmgr PNP_GetDeviceListSize WriteAndX andx attempt (netbios.rules) 4286 - NETBIOS SMB umpnpmgr PNP_GetDeviceListSize WriteAndX attempt (netbios.rules) 4287 - NETBIOS SMB umpnpmgr PNP_GetDeviceListSize WriteAndX little endian andx attempt (netbios.rules) 4288 - NETBIOS SMB umpnpmgr PNP_GetDeviceListSize WriteAndX little endian attempt (netbios.rules) 4289 - NETBIOS SMB umpnpmgr PNP_GetDeviceListSize WriteAndX unicode andx attempt (netbios.rules) 4290 - NETBIOS SMB umpnpmgr PNP_GetDeviceListSize WriteAndX unicode attempt (netbios.rules) 4291 - NETBIOS SMB umpnpmgr PNP_GetDeviceListSize WriteAndX unicode little endian andx attempt (netbios.rules) 4292 - NETBIOS SMB umpnpmgr PNP_GetDeviceListSize WriteAndX unicode little endian attempt (netbios.rules) 4293 - NETBIOS SMB umpnpmgr PNP_GetDeviceListSize andx attempt (netbios.rules) 4294 - NETBIOS SMB umpnpmgr PNP_GetDeviceListSize attempt (netbios.rules) 4295 - NETBIOS SMB umpnpmgr PNP_GetDeviceListSize little endian andx attempt (netbios.rules) 4296 - NETBIOS SMB umpnpmgr PNP_GetDeviceListSize little endian attempt (netbios.rules) 4297 - NETBIOS SMB umpnpmgr PNP_GetDeviceListSize unicode andx attempt (netbios.rules) 4298 - NETBIOS SMB umpnpmgr PNP_GetDeviceListSize unicode attempt (netbios.rules) 4299 - NETBIOS SMB umpnpmgr PNP_GetDeviceListSize unicode little endian andx attempt (netbios.rules) 4300 - NETBIOS SMB umpnpmgr PNP_GetDeviceListSize unicode little endian attempt (netbios.rules) 4301 - NETBIOS SMB v4 umpnpmgr PNP_GetDeviceListSize WriteAndX andx attempt (netbios.rules) 4302 - NETBIOS SMB v4 umpnpmgr PNP_GetDeviceListSize WriteAndX attempt (netbios.rules) 4303 - NETBIOS SMB v4 umpnpmgr PNP_GetDeviceListSize WriteAndX little endian andx attempt (netbios.rules) 4304 - NETBIOS SMB v4 umpnpmgr PNP_GetDeviceListSize WriteAndX little endian attempt (netbios.rules) 4305 - NETBIOS SMB v4 umpnpmgr PNP_GetDeviceListSize WriteAndX unicode andx attempt (netbios.rules) 4306 - NETBIOS SMB v4 umpnpmgr PNP_GetDeviceListSize WriteAndX unicode attempt (netbios.rules) 4307 - NETBIOS SMB v4 umpnpmgr PNP_GetDeviceListSize WriteAndX unicode little endian andx attempt (netbios.rules) 4308 - NETBIOS SMB v4 umpnpmgr PNP_GetDeviceListSize WriteAndX unicode little endian attempt (netbios.rules) 4309 - NETBIOS SMB v4 umpnpmgr PNP_GetDeviceListSize andx attempt (netbios.rules) 4310 - NETBIOS SMB v4 umpnpmgr PNP_GetDeviceListSize attempt (netbios.rules) 4311 - NETBIOS SMB v4 umpnpmgr PNP_GetDeviceListSize little endian andx attempt (netbios.rules) 4312 - NETBIOS SMB v4 umpnpmgr PNP_GetDeviceListSize little endian attempt (netbios.rules) 4313 - NETBIOS SMB v4 umpnpmgr PNP_GetDeviceListSize unicode andx attempt (netbios.rules) 4314 - NETBIOS SMB v4 umpnpmgr PNP_GetDeviceListSize unicode attempt (netbios.rules) 4315 - NETBIOS SMB v4 umpnpmgr PNP_GetDeviceListSize unicode little endian andx attempt (netbios.rules) 4316 - NETBIOS SMB v4 umpnpmgr PNP_GetDeviceListSize unicode little endian attempt (netbios.rules) 4317 - NETBIOS SMB-DS umpnpmgr PNP_GetDeviceList WriteAndX andx attempt (netbios.rules) 4318 - NETBIOS SMB-DS umpnpmgr PNP_GetDeviceList WriteAndX attempt (netbios.rules) 4319 - NETBIOS SMB-DS umpnpmgr PNP_GetDeviceList WriteAndX little endian andx attempt (netbios.rules) 4320 - NETBIOS SMB-DS umpnpmgr PNP_GetDeviceList WriteAndX little endian attempt (netbios.rules) 4321 - NETBIOS SMB-DS umpnpmgr PNP_GetDeviceList WriteAndX unicode andx attempt (netbios.rules) 4322 - NETBIOS SMB-DS umpnpmgr PNP_GetDeviceList WriteAndX unicode attempt (netbios.rules) 4323 - NETBIOS SMB-DS umpnpmgr PNP_GetDeviceList WriteAndX unicode little endian andx attempt (netbios.rules) 4324 - NETBIOS SMB-DS umpnpmgr PNP_GetDeviceList WriteAndX unicode little endian attempt (netbios.rules) 4325 - NETBIOS SMB-DS umpnpmgr PNP_GetDeviceList andx attempt (netbios.rules) 4326 - NETBIOS SMB-DS umpnpmgr PNP_GetDeviceList attempt (netbios.rules) 4327 - NETBIOS SMB-DS umpnpmgr PNP_GetDeviceList little endian andx attempt (netbios.rules) 4328 - NETBIOS SMB-DS umpnpmgr PNP_GetDeviceList little endian attempt (netbios.rules) 4329 - NETBIOS SMB-DS umpnpmgr PNP_GetDeviceList unicode andx attempt (netbios.rules) 4330 - NETBIOS SMB-DS umpnpmgr PNP_GetDeviceList unicode attempt (netbios.rules) 4331 - NETBIOS SMB-DS umpnpmgr PNP_GetDeviceList unicode little endian andx attempt (netbios.rules) 4332 - NETBIOS SMB-DS umpnpmgr PNP_GetDeviceList unicode little endian attempt (netbios.rules) 4333 - NETBIOS SMB-DS v4 umpnpmgr PNP_GetDeviceList WriteAndX andx attempt (netbios.rules) 4334 - NETBIOS SMB-DS v4 umpnpmgr PNP_GetDeviceList WriteAndX attempt (netbios.rules) 4335 - NETBIOS SMB-DS v4 umpnpmgr PNP_GetDeviceList WriteAndX little endian andx attempt (netbios.rules) 4336 - NETBIOS SMB-DS v4 umpnpmgr PNP_GetDeviceList WriteAndX little endian attempt (netbios.rules) 4337 - NETBIOS SMB-DS v4 umpnpmgr PNP_GetDeviceList WriteAndX unicode andx attempt (netbios.rules) 4338 - NETBIOS SMB-DS v4 umpnpmgr PNP_GetDeviceList WriteAndX unicode attempt (netbios.rules) 4339 - NETBIOS SMB-DS v4 umpnpmgr PNP_GetDeviceList WriteAndX unicode little endian andx attempt (netbios.rules) 4340 - NETBIOS SMB-DS v4 umpnpmgr PNP_GetDeviceList WriteAndX unicode little endian attempt (netbios.rules) 4341 - NETBIOS SMB-DS v4 umpnpmgr PNP_GetDeviceList andx attempt (netbios.rules) 4342 - NETBIOS SMB-DS v4 umpnpmgr PNP_GetDeviceList attempt (netbios.rules) 4343 - NETBIOS SMB-DS v4 umpnpmgr PNP_GetDeviceList little endian andx attempt (netbios.rules) 4344 - NETBIOS SMB-DS v4 umpnpmgr PNP_GetDeviceList little endian attempt (netbios.rules) 4345 - NETBIOS SMB-DS v4 umpnpmgr PNP_GetDeviceList unicode andx attempt (netbios.rules) 4346 - NETBIOS SMB-DS v4 umpnpmgr PNP_GetDeviceList unicode attempt (netbios.rules) 4347 - NETBIOS SMB-DS v4 umpnpmgr PNP_GetDeviceList unicode little endian andx attempt (netbios.rules) 4348 - NETBIOS SMB-DS v4 umpnpmgr PNP_GetDeviceList unicode little endian attempt (netbios.rules) 4349 - NETBIOS SMB-DS umpnpmgr PNP_GetDeviceListSize WriteAndX andx attempt (netbios.rules) 4350 - NETBIOS SMB-DS umpnpmgr PNP_GetDeviceListSize WriteAndX attempt (netbios.rules) 4351 - NETBIOS SMB-DS umpnpmgr PNP_GetDeviceListSize WriteAndX little endian andx attempt (netbios.rules) 4352 - NETBIOS SMB-DS umpnpmgr PNP_GetDeviceListSize WriteAndX little endian attempt (netbios.rules) 4353 - NETBIOS SMB-DS umpnpmgr PNP_GetDeviceListSize WriteAndX unicode andx attempt (netbios.rules) 4354 - NETBIOS SMB-DS umpnpmgr PNP_GetDeviceListSize WriteAndX unicode attempt (netbios.rules) 4355 - NETBIOS SMB-DS umpnpmgr PNP_GetDeviceListSize WriteAndX unicode little endian andx attempt (netbios.rules) 4356 - NETBIOS SMB-DS umpnpmgr PNP_GetDeviceListSize WriteAndX unicode little endian attempt (netbios.rules) 4357 - NETBIOS SMB-DS umpnpmgr PNP_GetDeviceListSize andx attempt (netbios.rules) 4358 - NETBIOS SMB-DS umpnpmgr PNP_GetDeviceListSize attempt (netbios.rules) 4359 - NETBIOS SMB-DS umpnpmgr PNP_GetDeviceListSize little endian andx attempt (netbios.rules) 4360 - NETBIOS SMB-DS umpnpmgr PNP_GetDeviceListSize little endian attempt (netbios.rules) 4361 - NETBIOS SMB-DS umpnpmgr PNP_GetDeviceListSize unicode andx attempt (netbios.rules) 4362 - NETBIOS SMB-DS umpnpmgr PNP_GetDeviceListSize unicode attempt (netbios.rules) 4363 - NETBIOS SMB-DS umpnpmgr PNP_GetDeviceListSize unicode little endian andx attempt (netbios.rules) 4364 - NETBIOS SMB-DS umpnpmgr PNP_GetDeviceListSize unicode little endian attempt (netbios.rules) 4365 - NETBIOS SMB-DS v4 umpnpmgr PNP_GetDeviceListSize WriteAndX andx attempt (netbios.rules) 4366 - NETBIOS SMB-DS v4 umpnpmgr PNP_GetDeviceListSize WriteAndX attempt (netbios.rules) 4367 - NETBIOS SMB-DS v4 umpnpmgr PNP_GetDeviceListSize WriteAndX little endian andx attempt (netbios.rules) 4368 - NETBIOS SMB-DS v4 umpnpmgr PNP_GetDeviceListSize WriteAndX little endian attempt (netbios.rules) 4369 - NETBIOS SMB-DS v4 umpnpmgr PNP_GetDeviceListSize WriteAndX unicode andx attempt (netbios.rules) 4370 - NETBIOS SMB-DS v4 umpnpmgr PNP_GetDeviceListSize WriteAndX unicode attempt (netbios.rules) 4371 - NETBIOS SMB-DS v4 umpnpmgr PNP_GetDeviceListSize WriteAndX unicode little endian andx attempt (netbios.rules) 4372 - NETBIOS SMB-DS v4 umpnpmgr PNP_GetDeviceListSize WriteAndX unicode little endian attempt (netbios.rules) 4373 - NETBIOS SMB-DS v4 umpnpmgr PNP_GetDeviceListSize andx attempt (netbios.rules) 4374 - NETBIOS SMB-DS v4 umpnpmgr PNP_GetDeviceListSize attempt (netbios.rules) 4375 - NETBIOS SMB-DS v4 umpnpmgr PNP_GetDeviceListSize little endian andx attempt (netbios.rules) 4376 - NETBIOS SMB-DS v4 umpnpmgr PNP_GetDeviceListSize little endian attempt (netbios.rules) 4377 - NETBIOS SMB-DS v4 umpnpmgr PNP_GetDeviceListSize unicode andx attempt (netbios.rules) 4378 - NETBIOS SMB-DS v4 umpnpmgr PNP_GetDeviceListSize unicode attempt (netbios.rules) 4379 - NETBIOS SMB-DS v4 umpnpmgr PNP_GetDeviceListSize unicode little endian andx attempt (netbios.rules) 4380 - NETBIOS SMB-DS v4 umpnpmgr PNP_GetDeviceListSize unicode little endian attempt (netbios.rules)
