Sagan medium stable other

[CROWDSTRIKE] Machine Learning Analysis: Cloud-based ML medium confidence malware detection - Blocked

[CROWDSTRIKE] Machine Learning Analysis: Cloud-based ML medium confidence malware detection - Blocked

View Source

Detection Logic

alert any any any -> any any (msg:"[CROWDSTRIKE] Machine Learning Analysis: Cloud-based ML medium confidence malware detection - Blocked"; program:CrowdStrike; content:"A file written to the file-system meets the cloud-based machine learning model medium confidence threshold for malicious files"; content:"blocked"; nocase; content:"cat=Machine Learning"; normalize; classtype:suspicious-traffic; sid:5017630; rev: 2;)

Field Validations

Loading…

Comments (0)

Loading comments...