topic Re: RPC WinNuke in Network Security https://community.cisco.com/t5/network-security/rpc-winnuke/m-p/385118#M96357 <HTML><HEAD></HEAD><BODY><P>I have tried on two other sensors now, and it seems that this signature fires when traffic is sent to Windows 2000/2003 domain controllers.</P></BODY></HTML> Thu, 05 May 2005 11:47:18 GMT mlowery 2005-05-05T11:47:18Z RPC WinNuke https://community.cisco.com/t5/network-security/rpc-winnuke/m-p/385116#M96355 <P>All of a sudden, I've started getting alerts on RPC WinNuke Sig#:3345 from a domain controller to workstations on the internal network. </P><P></P><P>I am unable to find anything that has changed, nor can I find anything that would cause this event to be triggered. </P><P></P><P>Can anyone tell me if this is a known false-positive, or do I need to keep digging?</P><P></P><P>Thank you,</P><P>Michael</P> Sun, 10 Mar 2019 09:25:19 GMT https://community.cisco.com/t5/network-security/rpc-winnuke/m-p/385116#M96355 mlowery 2019-03-10T09:25:19Z Re: RPC WinNuke https://community.cisco.com/t5/network-security/rpc-winnuke/m-p/385117#M96356 <HTML><HEAD></HEAD><BODY><P>If possible could you please test this set up on a different sensor and check the results.</P></BODY></HTML> Mon, 02 May 2005 13:28:27 GMT https://community.cisco.com/t5/network-security/rpc-winnuke/m-p/385117#M96356 owillins 2005-05-02T13:28:27Z Re: RPC WinNuke https://community.cisco.com/t5/network-security/rpc-winnuke/m-p/385118#M96357 <HTML><HEAD></HEAD><BODY><P>I have tried on two other sensors now, and it seems that this signature fires when traffic is sent to Windows 2000/2003 domain controllers.</P></BODY></HTML> Thu, 05 May 2005 11:47:18 GMT https://community.cisco.com/t5/network-security/rpc-winnuke/m-p/385118#M96357 mlowery 2005-05-05T11:47:18Z