Detection Logic
alert any $EXTERNAL_NET any -> $HOME_NET any (msg: "[WINDOWS-MISC] File system full"; content: " 13570
| 3a
| "; classtype: system-error; program: NtFrs
| Ntfs; sid: 5001191; rev:4;)Field Validations
Loading…
Comments (0)
Loading comments...