From: Travis Green <travis@travisgreen.net>
Date: Tue, 9 Oct 2018 17:16:59 +0000 (-0600)
Subject: Added new classifications to classification.conf
X-Git-Tag: suricata-4.1.0-rc2~4
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=576b3b6a8198417e9ed2771d958a41fd1e3cd4da;p=thirdparty%2Fsuricata.git

Added new classifications to classification.conf

Added classifications from rule-writing community feedback.
---

diff --git a/classification.config b/classification.config
index ebe91cac71..228737eaa3 100644
--- a/classification.config
+++ b/classification.config
@@ -43,7 +43,6 @@ config classification: successful-user,Successful User Privilege Gain,1
 config classification: attempted-admin,Attempted Administrator Privilege Gain,1
 config classification: successful-admin,Successful Administrator Privilege Gain,1
 
-
 # NEW CLASSIFICATIONS
 config classification: rpc-portmap-decode,Decode of an RPC Query,2
 config classification: shellcode-detect,Executable code was detected,1
@@ -66,3 +65,13 @@ config classification: icmp-event,Generic ICMP event,3
 config classification: kickass-porn,SCORE! Get the lotion!,1
 config classification: policy-violation,Potential Corporate Privacy Violation,1
 config classification: default-login-attempt,Attempt to login by a default username and password,2
+
+# Update
+config classification: targeted-activity,Targeted Malicious Activity was Detected,1
+config classification: exploit-kit,Exploit Kit Activity Detected,1
+config classification: external-ip-check,Device Retrieving External IP Address Detected,2
+config classification: domain-c2,Domain Observed Used for C2 Detected,1
+config classification: pup-activity,Possibly Unwanted Program Detected,2
+config classification: credential-theft,Successful Credential Theft Detected,1
+config classification: social-engineering,Possible Social Engineering Attempted,2
+config classification: coin-mining,Crypto Currency Mining Activity Detected,2