Sagan medium stable other

[DYNAMIC] Azure Eventhub Windows Powershell Logs Detected

[DYNAMIC] Azure Eventhub Windows Powershell Logs Detected

View Source

Detection Logic

alert any any any -> any any (msg:"[DYNAMIC] Azure Eventhub Windows Powershell Logs Detected"; program:*PowerShell*; content:"RenderedDescription"; dynamic_load: $RULE_PATH/azureEventHub_windows-powershell.rules; classtype:dynamic-rules; sid:5017337; rev:1;)

Field Validations

Loading…

Comments (0)

Loading comments...