Versions (2)
Version DetailsCurrent
Rev: 4 • May 26, 2024, 12:00 PM🐾 - ℹ Wazuh XDR agent for Windows 🪟 > Server enrollment
alert tls $HOME_NET any -> any 1515 (msg:"🐾 - ℹ Wazuh XDR agent for Windows 🪟 > Server enrollment"; flow:to_server, stateless; threshold:type limit, track by_src,count 1, seconds 86400; ssl_version:tls1.3; ja3.hash; content:"befadf104471be7e62eb22b872cd74b6"; reference:url,https://wazuh.com/; metadata:created_at 2024_05_26, updated_at 2024_05_29; sid:3321270; rev:4; classtype:misc-activity;)
May 26, 2024, 12:00 PM
May 29, 2024, 12:00 PM
May 26, 2024, 11:00 PM
May 29, 2025, 11:12 PM
rules/PAW-PATRULES_MISC.rules