Detection Logic
drop any $EXTERNAL_NET any -> $HOME_NET any (msg:"TCP Treason uncloaked"; content: "Treason uncloaked"; default_proto: tcp; classtype: bad-unknown; program: TCP; parse_src_ip: 1; sid: 5000031; rev:4;)Field Validations
Loading…
Comments (0)
Loading comments...