Sagan medium stable other

[Barracuda] Incident Response Potential Incident: Related Threats Detected

[Barracuda] Incident Response Potential Incident: Related Threats Detected

View Source

Detection Logic

alert any $HOME_NET any -> $HOME_NET any (msg:"[Barracuda] Incident Response Potential Incident: Related Threats Detected"; program:Forensics; content:"
| 22
| category
| 22 3a 22
| Potential Incident: Related Threats
| 22
| "; parse_src_ip:1; reference:url,https://campus.barracuda.com/product/forensics/doc/167841332/reviewing-insights/; classtype:suspicious-activity; sid:5015590; rev:1;)

Field Validations

Loading…

Comments (0)

Loading comments...