ET ATTACK_RESPONSE Possible MS CMD Shell opened on local system 2
Sourceet/open
CreatedApril 16, 2014
UpdatedApril 12, 2023
Classificationsuccessful-admin
alert tcp $HOME_NET any -> any any (msg:"ET ATTACK_RESPONSE Possible MS CMD Shell opened on local system 2"; dsize:<200; content:"Microsoft Windows "; depth:40; content:"[Version"; within:10; content:"Copyright (c) 2009"; distance:0; content:"Microsoft Corp"; distance:0; classtype:successful-admin; sid:2018392; rev:2; metadata:created_at 2014_04_16, confidence Medium, signature_severity Major, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2023_04_12;)
Metadata
created at2014_04_16
confidenceMedium
signature severityMajor
tagDescription_Generated_By_Proofpoint_Nexus
updated at2023_04_12
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!