Sagan medium stable other

[Barracuda] Incident Response Potential Incident: Post-Delivery Threat Detected

[Barracuda] Incident Response Potential Incident: Post-Delivery Threat Detected

View Source

Detection Logic

alert any $HOME_NET any -> $HOME_NET any (msg:"[Barracuda] Incident Response Potential Incident: Post-Delivery Threat Detected"; program:Forensics; content:"
| 22
| category
| 22 3a 22
| Potential Incident: Post-Delivery Threat
| 22
| "; parse_src_ip:1; reference:url,https://campus.barracuda.com/product/forensics/doc/167841332/reviewing-insights/; classtype:suspicious-activity; sid:5015589; rev:1;)

Field Validations

Loading…

Comments (0)

Loading comments...