Sagan medium stable other

[MSAPI-SECURITYCOMPLIANCECENTER] Insight Generated - Significant mail flow without TLS

[MSAPI-SECURITYCOMPLIANCECENTER] Insight Generated - Significant mail flow without TLS

View Source

Detection Logic

alert any $HOME_NET any -> $EXTERNAL_NET any (msg: "[MSAPI-SECURITYCOMPLIANCECENTER] Insight Generated - Significant mail flow without TLS"; program:SecurityComplianceCenter; json_content: ".Operation", "InsightGenerated"; json_content:".Name","Inbound OnPremises connector seeing significant mail flow without TLS"; json_map: "program",".Workload"; classtype:suspicious-traffic; sid:5014184; rev:1;)

Field Validations

Loading…

Comments (0)

Loading comments...