Sagan critical stable other

[CISCO-SECUREENDPOINT] Exploit attempt was prevented

[CISCO-SECUREENDPOINT] Exploit attempt was prevented

View Source

Detection Logic

alert any $HOME_NET any -> $HOME_NET any (msg:"[CISCO-SECUREENDPOINT] Exploit attempt was prevented"; program:*CiscoSecureEndpoint*
| CISCO-AMP; content:"100: An exploit attempt was prevented"; classtype:trojan-activity; sid:5008355; rev:2; metadata: updated_on 2024_06_13;)

Field Validations

Loading…

Comments (0)

Loading comments...