Detection Logic
alert any $EXTERNAL_NET any -> $HOME_NET any (msg: "[ORACLE] Authentication Failure"; content: "RETURNCODE
| 3a
| [4]
| 22
| 1017
| 22
| "; default_proto: tcp; default_dst_port: 1521; classtype: unsuccessful-user; parse_src_ip: 1; sid:5001717; rev: 4;)Field Validations
Loading…
Comments (0)
Loading comments...