| 700194 | IoT Reaper Backdoor Detection | critical |
| 9750 | Mirai Botnet - Binary Fetch Detection | high |
| 9489 | ASP Web Shell Detection (China Chopper) | high |
| 9488 | JSP Web Shell Detection (China Chopper) | high |
| 9487 | PHP Web Shell Detection (China Chopper) | high |
| 6926 | PHP Code Obfuscation | info |
| 6925 | PHP c99shell Backdoor Script Detection | high |
| 6800 | Apache CDorked backdoor detection | critical |
| 6579 | Pushdo Botnet Detection | critical |
| 7058 | DNS Client Flame Infection | high |
| 6492 | Flame Worm Detection | critical |
| 7055 | DNSChanger Detection | high |
| 6246 | FTP Client Initiated from an SMTP Server | high |
| 6232 | Trojan/Backdoor Detection - WinEggDrop Infected Host Detection | critical |
| 6231 | SMTP Proxy Traffic Detected | medium |
| 6230 | Windows Command Shell as Service | high |
| 6229 | Trojan/Backdoor Detection - Windows Command Shell as Service | high |
| 6228 | Trojan/Backdoor Detection - RXBOT / RBOT Vulnerability Scan | critical |
| 6227 | Trojan/Backdoor Detection - RXBOT / RBOT Exploit Report | critical |
| 6226 | Trojan/Backdoor Detection - Subseven | critical |
| 6225 | Trojan/Backdoor Detection - netbus | critical |
| 6224 | Trojan/Backdoor Detection - Doly 2.0 | critical |
| 6223 | Trojan/Backdoor Detection - QAZ Worm | critical |
| 6222 | Trojan/Backdoor Detection - win-trin00 | critical |
| 6221 | Trojan/Backdoor Detection - BACKDOOR Matrix 2.0 Client | critical |
| 6220 | Trojan/Backdoor Detection - GateCrasher | critical |
| 6219 | Trojan/Backdoor Detection - BACKDOOR SatansBackdoor.2.0.Beta | critical |
| 6218 | Trojan/Backdoor Detection - BACKDOOR Infector.1.x | critical |
| 5976 | MetaSploit Server Detection | high |
| 5975 | MetaSploit Exploited Machine Detection | high |
| 5974 | MetaSploit Exploited Machine Detection | high |
| 5880 | LizaMoon Malware Detection | critical |
| 5841 | SSL Revoked Certificate Detection | critical |
| 5840 | SSL Revoked Certificate Detection | critical |
| 5839 | SSL Revoked Certificate Detection | critical |
| 5838 | SSL Revoked Certificate Detection | critical |
| 5837 | SSL Revoked Certificate Detection | critical |
| 5836 | SSL Revoked Certificate Detection | critical |
| 5835 | SSL Revoked Certificate Detection | critical |
| 5834 | SSL Revoked Certificate Detection | critical |
| 5738 | Stuxnet Infected Host Detection | critical |
| 5721 | Stuxnet Traffic Detection | info |
| 5706 | Microsoft Portable Executable (PE) in Transit Detection (Client) | critical |
| 5701 | Microsoft Executable in Transit Detection | critical |
| 5549 | Trojan/Backdoor - Warbot Detection | critical |
| 5526 | Trojan/Backdoor - Storm/Pecoan.AG Worm Detection | critical |
| 5357 | Trojan/Backdoor - Arugizer Detection | high |
| 4978 | Trojan/Backdoor Detection - Conficker Detection | critical |
| 4977 | Trojan/Backdoor Detection - Conficker Detection | critical |
| 4657 | Dns2TCP Service Detection | info |
