Sagan low stable other
MSAPI Security Compliance Center device detected
MSAPI Security Compliance Center device detected
Detection Logic
alert any $HOME_NET any -> $HOME_NET any (msg:"MSAPI Security Compliance Center device detected"; program:SecurityComplianceCenter; metadata: fingerprint_source logs, fingerprint_os msapi_microsoft_security, fingerprint_expire 86400; threshold: type suppress, track by_src, seconds 43200, count 1; classtype:fingerprint; sid:5013718; rev:1;) Field Validations
Loading…
Comments (0)
Loading comments...