ET USER_AGENTS Automox User-Agent Observed (ax-dcu-powershell)
Sourceet/open
Fileemerging-user_agents.rules
CreatedJune 22, 2026
UpdatedJune 22, 2026
Classificationcommand-and-control
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET USER_AGENTS Automox User-Agent Observed (ax-dcu-powershell)"; flow:established,to_server ; http.user_agent; content:"ax-dcu-powershell"; threshold:type limit,count 1,seconds 300,track by_src ; classtype:command-and-control; sid:2070033; rev:1; metadata:affected_product Windows_Client, attack_target Client_Endpoint, created_at 2026_06_22, deployment Perimeter, deployment SSLDecrypt, confidence High, signature_severity Informational, tag RMM, updated_at 2026_06_22; target:src_ip;)
Metadata
affected productWindows_Client
attack targetClient_Endpoint
created at2026_06_22
deploymentSSLDecrypt
confidenceHigh
signature severityInformational
tagRMM
updated at2026_06_22
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!