Think you have a false positive on this rule?

Sid 1-10280

Message

DELETED NETBIOS SMB-DS svcctl WriteAndX unicode little endian andx bind attempt

Summary

Impact

Detailed information

Affected systems

Ease of attack

False positives

False negatives

Corrective action

Upgrade to the latest non-affected version of the software.

Apply the appropriate vendor supplied patches.

Contributors

Additional References

  • www.hsc.fr/ressources/articles/winnetsrv/msrpc_svcctl.html