Detection Logic
alert any $EXTERNAL_NET any -> $HOME_NET any (msg:"[SAMBA] Connection denied"; pcre: "/denied connection from
| connection denied from/i"; classtype: unsuccessful-user; program: smbd; sid: 5000146; rev:2;)Field Validations
Loading…
Comments (0)
Loading comments...