Sagan informational stable other

[CyberArk] Process has stopped (deprecated).

[CyberArk] Process has stopped (deprecated).

View Source

Detection Logic

alert any $HOME_NET any -> $HOME_NET any (msg:"[CyberArk] Process has stopped (deprecated)."; program:cyberark; content:"Cyber-Ark"; content:"Action=Process has stopped (deprecated)."; distance:0; classtype:system-event; reference:url,docs.cyberark.com/Product-Doc/OnlineHelp/PAS/11.4/en/Content/EVD/Action-Codes.htm; sid:5010884; rev:1; metadata:created_at 2023_01_11, updated_at 2023_07_28;)

Field Validations

Loading…

Comments (0)

Loading comments...