Rule Update
21-030 (July 2, 2021)
DESCRIPTION
* indicates a new version of an existing rule
Deep Packet Inspection Rules:
Port Mapper Windows
1001033* - Windows Port Mapper Decoder
Windows SMB Server
1011018 - Identified DCERPC AddPrinterDriverEx Call Over SMB Protocol
Windows Services RPC Server DCERPC
1011016 - Identified DCERPC AddPrinterDriverEx Call Over TCP Protocol
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
1011017 - Microsoft Windows - Print Spooler Failed Loading Plugin Module (PrintNightmare)
Deep Packet Inspection Rules:
Port Mapper Windows
1001033* - Windows Port Mapper Decoder
Windows SMB Server
1011018 - Identified DCERPC AddPrinterDriverEx Call Over SMB Protocol
Windows Services RPC Server DCERPC
1011016 - Identified DCERPC AddPrinterDriverEx Call Over TCP Protocol
Integrity Monitoring Rules:
There are no new or updated Integrity Monitoring Rules in this Security Update.
Log Inspection Rules:
1011017 - Microsoft Windows - Print Spooler Failed Loading Plugin Module (PrintNightmare)