Sagan medium stable other

[SNORT] Attempted Information Leak

[SNORT] Attempted Information Leak

View Source

Detection Logic

alert any $EXTERNAL_NET any -> $HOME_NET any (msg:"[SNORT] Attempted Information Leak"; program: snort; content: "Classification
| 3a
| Attempted Information Leak"; classtype: attempted-recon; xbits: set,recon,track ip_src, expire 86400; normalize; sid: 5000979; rev:6;)

Field Validations

Loading…

Comments (0)

Loading comments...