Sagan low stable other

[WINDOWS-MISC] WinVNC4 Connection Authentication failure

[WINDOWS-MISC] WinVNC4 Connection Authentication failure

View Source

Detection Logic

alert any $EXTERNAL_NET any -> $HOME_NET any (msg: "[WINDOWS-MISC] WinVNC4 Connection Authentication failure"; content: "Authentication failure"; default_proto: tcp; default_dst_port: 5900; classtype: unsuccessful-user; program: WinVNC4; parse_src_ip: 1; parse_port; sid:5009263; metadata: created_on 2022_11_22, old_sid 5000350; rev:6;)

Field Validations

Loading…

Comments (0)

Loading comments...