.N NetProwler_SU26 #Policy Name .L 2 #Policy structure .D Detects NetProwler SNMP traps for NP signatures found in SU 26 #Policy Description .V 1046921330 #Policy revision number .Z 20000 #Policy ID .Z 20000 #Policy ID .R BugBearB_NETBIOS_Worm_Propagation #Rule Definition ..D This signature detects the propagation of the Bug Bear B worm over NETBIOS. #Rule Description ..Z 20001 #Rule ID ..V 90 #Rule Value ..S #Select Clause(s) ...G System Message #System Message ....T *NetProwler*BugBearB_NETBIOS_Worm_Propagation* #Regular text ....Z 20002 #ID of the clause ..A #Action Clause(s) ...E Record to Event Viewer #Record Event ....Z 20003 #ID of the clause .R BugBearB_SMTP_Worm_Propagation #Rule Definition ..D This signature detects the propagation of the Bug Bear B worm over SMTP. #Rule Description ..Z 20001 #Rule ID ..V 90 #Rule Value ..S #Select Clause(s) ...G System Message #System Message ....T *NetProwler*BugBearB_SMTP_Worm_Propagation* #Regular text ....Z 20002 #ID of the clause ..A #Action Clause(s) ...E Record to Event Viewer #Record Event ....Z 20003 #ID of the clause