Sagan high stable other
[FORTINET] Possible CVE-2022-40684 Indicators Detected v1
[FORTINET] Possible CVE-2022-40684 Indicators Detected v1
Detection Logic
alert any $HOME_NET any -> $HOME_NET any (msg:"[FORTINET] Possible CVE-2022-40684 Indicators Detected v1"; content:"type=
| 22
| event
| 22
| "; content:"user=
| 22
| Local_Process_Access
| 22
| "; content:"ui=
| 22
| Node.js
| 22
| "; reference:url,www.horizon3.ai/fortinet-iocs-cve-2022-40684/; content:!"- - - -"; classtype:attempted-admin; sid:5008401; rev:1;) Field Validations
Loading…
Comments (0)
Loading comments...