Sagan medium stable other

[MIMECAST] Internal email protection

[MIMECAST] Internal email protection

View Source

Detection Logic

alert any $HOME_NET any -> $EXTERNAL_NET any (msg: "[MIMECAST] Internal email protection"; program: MIMECAST; content: "Route=Inbound"; content: "md5="; content:!"Virus="; reference: url,www.mimecast.com/tech-connect/documentation/tutorials/understanding-siem-logs/; classtype: bad-unknown; sid:5005772; rev: 1;)

Field Validations

Loading…

Comments (0)

Loading comments...