Sagan critical stable other

[BitdefenderGZ] Malicious File Detected (Blocked)

[BitdefenderGZ] Malicious File Detected (Blocked)

View Source

Detection Logic

alert any $HOME_NET any -> $HOME_NET any (msg:"[BitdefenderGZ] Malicious File Detected (Blocked)"; program:BitdefenderGZ; content:"BitdefenderGZMalwareType=file"; meta_content:"act=%sagan%",deleted,blocked,quarantined,disinfected; parse_src_ip:1; reference:url,https://www.bitdefender.com/business/support/en/77212-237089-event-types.html; classtype:trojan-activity; sid:5014662; rev:1; metadata:created_at 2024_01_20, updated_at 2024_01_20;)

Field Validations

Loading…

Comments (0)

Loading comments...