Detection Logic
alert any $EXTERNAL_NET any -> $HOME_NET any (msg: "[GCP-SCC] Allow RDP Port"; content:"SeverityLevel"; content:"High"; content:"open_rdp_port"; nocase; classtype:network-event; sid:5005610; rev:1)Field Validations
Loading…
Comments (0)
Loading comments...