Sagan medium stable other

[MIMECAST] Malicious File Detected

[MIMECAST] Malicious File Detected

View Source

Detection Logic

alert any $HOME_NET any -> $HOME_NET any (msg:"[MIMECAST] Malicious File Detected"; program:mimecast; json_content:".eventType","attachment protection"; json_map:"src_ip",".senderIp"; reference:url,https://developer.services.mimecast.com/siem-tutorial-cg; classtype:suspicious-activity; sid:5017381; rev:1; metadata:created_at 2026_01_16, updated_at 2026_01_16;)

Field Validations

Loading…

Comments (0)

Loading comments...