Sagan high stable other

[FORTINET] Possible CVE-2022-40684 Indicators Detected v2

Detection Logic

alert any $HOME_NET any -> $HOME_NET any (msg:"[FORTINET] Possible CVE-2022-40684 Indicators Detected v2"; content:"type=
| 22
| event
| 22
| "; content:"user=
| 22
| Local_Process_Access
| 22
| "; content:"ui=
| 22
| Report Runner
| 22
| "; reference:url,www.horizon3.ai/fortinet-iocs-cve-2022-40684/; content:!"- - - -"; classtype:attempted-admin; sid:5008402; rev:1;)

Field Validations

Loading…

Comments (0)

Loading comments...