HIDS 67128
From Atomicorp Wiki
This rule detects when an XML message or post has been sent to the server, and is so badly formated that the XML library can not parse it. There are a number of known attacks on XML parser libraries that send badly formated XML messages or posts and this rule detects when this occurs.
