[CROWDSTRIKE] Machine Learning Analysis Blocked - ScreenConnect Quarantined Files In An EPP Detection Summary Event

alert any any any -> any any (msg:"[CROWDSTRIKE] Machine Learning Analysis Blocked - ScreenConnect Quarantined Files In An EPP Detection Summary Event"; program:CrowdStrike; content:"Quarantined files in an EPP detection summary event"; content:"ScreenConnect"; content:"blocked"; content:!"msg="; nocase; content:"cat=Machine Learning"; parse_src_ip:1; normalize; classtype:suspicious-traffic; sid:5017782; rev: 2;)