Detection Logic
alert any $EXTERNAL_NET any -> $HOME_NET any (msg: "[FORTINET] FTP attempt"; content: "80000
| 22
| type="; content: "user="; content: "group="; content:!"- - - -"; classtype: suspicious-traffic; sid: 5000972; rev:2;)Field Validations
Loading…
Comments (0)
Loading comments...