by ISS : п.с. можно

Image_GIF_Netscape_SubBlock_Corrupt
This signature detects specially crafted GIF files which contain invalid Netscape application extension subblocks. The invalid extensions may leader to a buffer overflow and execution in of arbitrary code in the Apple Quicktime movie player.

TCP_Port_Scan
This signature detects when a computer attempts to access more than 10 different TCP ports on the victims computer.

Attack signature:
These signatures reflect patterns in system or network activity that signal a possible virus or hacker attack. Intrusion detection systems and firewalls use these signatures to distinguish between legitimate and potentially malicious activity.