CVE-2021-31166-suricata.rules

alert tcp any any <> $HOME_NET 80 (http.accept_enc; content:", ,"; endswith; flow:to_server, established; msg:"CVE-2021-31166 exploitation attempt"; reference: cve,CVE-2021-31166; reference: url,msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-31166; reference: url,github.com/Frankmock/CVE-2021-31166-detection-rules; sid:21311661; rev:1;)