Request Content
content:"keytest"; nocase;
content:!"keytest"; nocase;
re2:"/keytest|codetest/"; nocase;
re2:!"/keytest|codetest/";nocase;
Header
headercontent:"keytest|7c|codetest";nocase;
headercontent:!"keytest|7c|codetest";nocase;
re2:"/keytest|codetest/H";nocase;
re2:!"/keytest|codetest/H";nocase;
URI with Query String
uricontent:"keytest|7c|codetest";nocase;
uricontent:!"keytest|7c|codetest";nocase;
re2:"/keytest|codetest/U";nocase;
re2:!"/keytest|codetest/U";nocase;
URI without Query String
uricontent:"keytest|7c|codetest";nocase; objonly;
uricontent:!"keytest|7c|codetest";nocase; objonly;
re2:"/keytes|codetest/U"; nocase;objonly;
re2:!"/keytest|codetest/U";nocase; objonly;
Parameter/Cookie/Content Profile
valuecontent:"keytest|7c|codetest";nocase; norm;
valuecontent:!"keytest|7c|codetest";nocase; norm;
re2:"/keytest|codetest/V";nocase; norm;
re2:!"/keytest|codetest/V";nocase; norm;
Parameter/Cookie
valuecontent:"keytest|7c|codetest";nocase; httponly; norm;
valuecontent:!"keytest|7c|codetest";nocase; httponly; norm;
re2:"/keytest|codetest/V";nocase; httponly; norm;
re2:!"/keytest|codetest/V";nocase; httponly; norm;
GWT
valuecontent:"keytest|7c|codetest";nocase; gwtonly; norm;
valuecontent:!"keytest|7c|codetest";nocase; gwtonly; norm;
re2:"/keytest|codetest/V";nocase; gwtonly; norm;
re2:!"/keytest|codetest/V";nocase; gwtonly; norm;
JSON
valuecontent:"keytest|7c|codetest";nocase; jsononly; norm;
valuecontent:!"keytest|7c|codetest";nocase; jsononly; norm;
re2:"/keytest|codetest/V";nocase; jsononly; norm;
re2:!"/keytest|codetest/V";nocase; jsononly; norm;
XML
valuecontent:"keytest|7c|codetest";nocase; xmlonly; norm;
valuecontent:!"keytest|7c|codetest";nocase; xmlonly; norm;
re2:"/keytest|codetest/V";nocase; xmlonly; norm;
re2:!"/keytest|codetest/V";nocase; xmlonly; norm;