[CROWDSTRIKE] Machine Learning Analysis: On-sensor ML high confidence malware detection - Blocked

alert any any any -> any any (msg:"[CROWDSTRIKE] Machine Learning Analysis: On-sensor ML high confidence malware detection - Blocked"; program:CrowdStrike; content:"A file written to the file system meets the on-sensor machine learning high confidence threshold for malicious files"; content:"blocked"; nocase; content:"cat=Machine Learning"; normalize; classtype:suspicious-traffic; sid:5017633; rev: 2;)