Sagan critical stable other

[CISCO-SECUREENDPOINT] Exploit attempt was detected

[CISCO-SECUREENDPOINT] Exploit attempt was detected

View Source

Detection Logic

alert any $HOME_NET any -> $HOME_NET any (msg:"[CISCO-SECUREENDPOINT] Exploit attempt was detected"; program:*CiscoSecureEndpoint*
| CISCO-AMP; content:"102: An exploit attempt was detected"; classtype:trojan-activity; sid:5008352; rev:2; metadata: updated_on 2024_06_13;)

Field Validations

Loading…

Comments (0)

Loading comments...