Detection Logic
alert any $EXTERNAL_NET any -> $HOME_NET any (msg: "[GCP-SCC] Allow RDP Port"; content:"SeverityLevel"; content:"High"; content:"allow_public_bucket_acl"; nocase; classtype:network-event; sid:5005611; rev:1)Field Validations
Loading…
Comments (0)
Loading comments...