Signature Detail
Short Name |
SMB:INFO:DOT-EXE-FILE-XFER |
|---|---|
Severity |
Info |
Recommended |
No |
Category |
SMB |
Release Date |
2005/01/14 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
SMB: .exe File Transfer
This signature detects files with an .exe extension being transferred using Server Message Block (SMB). Although this activity is common on local area networks, it is suspicious when performed over the Internet. To reduce unnecessary log entries, use this attack object only in rules that monitor traffic to or from the Internet.
Extended Description
None