[CROWDSTRIKE] Machine Learning Analysis Blocked - Mimikatz Network Access In An EPP Detection Summary Event

alert any any any -> any any (msg:"[CROWDSTRIKE] Machine Learning Analysis Blocked - Mimikatz Network Access In An EPP Detection Summary Event"; program:CrowdStrike; content:"Network access in an EPP detection summary event"; content:"Mimikatz"; content:"standard detection"; content:!"msg="; nocase; content:"cat=Machine Learning"; parse_src_ip:1; parse_dst_ip:2; normalize; classtype:suspicious-traffic; sid:5017779; rev: 2;)