Sagan informational stable other

[BitdefenderGZ] Advanced Threat Control IDS Blocked APP

[BitdefenderGZ] Advanced Threat Control IDS Blocked APP

View Source

Detection Logic

alert any $HOME_NET any -> $HOME_NET any (msg:"[BitdefenderGZ] Advanced Threat Control IDS Blocked APP"; program:BitdefenderGZ; content:"BitdefenderGZModule=avc"; content:"BitdefenderGZExploitType=IDS Blocked APP"; parse_src_ip:1; reference:url,https://www.bitdefender.com/business/support/en/77212-237089-event-types.html; classtype:system-event; sid:5014668; rev:1; metadata:created_at 2024_01_20, updated_at 2024_01_20;)

Field Validations

Loading…

Comments (0)

Loading comments...