Detection Logic
alert any $EXTERNAL_NET any -> $HOME_NET any (msg:"[SQUID] 'passwd' access attempt"; content: "passwd"; default_proto: tcp; default_dst_port: $SQUID_PORT; classtype: web-application-attack; program: squid; sid: 5000049; rev:3;)Field Validations
Loading…
Comments (0)
Loading comments...