ET POLICY Office Document Containing AutoExec Macro Via smtp
Sourceet/open
CreatedOctober 31, 2014
UpdatedJuly 26, 2019
Classificationpolicy-violation
alert http $EXTERNAL_NET any -> $SMTP_SERVERS any (msg:"ET POLICY Office Document Containing AutoExec Macro Via smtp"; flow:established,to_server; content:"QQB1AHQAbwBFAHgAZQBj"; reference:url,support.microsoft.com/kb/286310; classtype:policy-violation; sid:2019618; rev:2; metadata:created_at 2014_10_31, confidence High, signature_severity Informational, updated_at 2019_07_26;)
References
Metadata
created at2014_10_31
confidenceHigh
signature severityInformational
updated at2019_07_26
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!