Sagan low stable other

[MS-DEFENDER] Antimalware Scan Failed

[MS-DEFENDER] Antimalware Scan Failed

View Source

Detection Logic

alert any $EXTERNAL_NET any -> $HOME_NET any (msg:"[MS-DEFENDER] Antimalware Scan Failed"; event_id: 1005; classtype: system-error; reference: url,docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-antivirus/troubleshoot-microsoft-defender-antivirus; sid:5005239; rev: 1;)

Field Validations

Loading…

Comments (0)

Loading comments...