[CROWDSTRIKE] Machine Learning Analysis Blocked - File Meets File Analysis ML High-Confidence Malware Threshold

alert any any any -> any any (msg:"[CROWDSTRIKE] Machine Learning Analysis Blocked - File Meets File Analysis ML High-Confidence Malware Threshold"; program:CrowdStrike; content:"This file meets the File Analysis ML algorithm's high-confidence threshold for malware"; content:"blocked"; nocase; content:"cat=Machine Learning"; normalize; classtype:suspicious-traffic; sid:5017761; rev: 2;)