.N NetProwler_SU24	#Policy Name
.L 2	#Policy structure
.D Detects NetProwler SNMP traps for NP signatures found in SU 24	#Policy Description
.V 1046921330	#Policy revision number
.Z 20000	#Policy ID
.Z 20000	#Policy ID
.R HTTP_MS_IIS_Translate_Exploit	#Rule Definition
..D This signature detects patterns matching a WebDAV exploit used to overflow a dll on a vulnerable IIS machine.	#Rule Description
..Z 20001	#Rule ID
..V 90	#Rule Value
..S	#Select Clause(s)
...G System Message	#System Message
....T *NetProwler*HTTP_MS_IIS_Translate_Exploit*	#Regular text
....Z 20002	#ID of the clause
..A	#Action Clause(s)
...E Record to Event Viewer	#Record Event
....Z 20003	#ID of the clause