Sagan medium stable other

[DARKTRACE] Potential Malicious System Alert

Detection Logic

alert any $EXTERNAL_NET any -> $HOME_NET any (msg:"[DARKTRACE] Potential Malicious System Alert"; program: darktrace; content: "System
| 3a 3a
| "; parse_src_ip: 1; xbits: set,exploit_attempt,track ip_src,expire 21600; classtype: bad-unknown; sid:5005849; rev:2;)

Field Validations

Loading…

Comments (0)

Loading comments...