SMB: .exe File Transfer
This signature detects files with an .exe extension being transferred using Server Message Block (SMB). Although this activity is common on local area networks, it is suspicious when performed over the Internet. To reduce unnecessary log entries, use this attack object only in rules that monitor traffic to or from the Internet.
Short Name
SMB:INFO:DOT-EXE-FILE-XFER
Severity
Info
Recommended
False
Recommended Action
None
Category
SMB
Keywords
.exe File Transfer
Release Date
01/15/2005
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3375
False Positive
Rarely