Sagan medium stable other

[DARKTRACE] Potential Malicious Device Alert

Detection Logic

alert any $EXTERNAL_NET any -> $HOME_NET any (msg:"[DARKTRACE] Potential Malicious Device Alert"; program: darktrace; content: "Device
| 3a 3a
| "; parse_src_ip: 1; xbits: set,exploit_attempt,track ip_src,expire 21600; classtype: bad-unknown; sid:5005847; rev:2;)

Field Validations

Loading…

Comments (0)

Loading comments...