ET ATTACK_RESPONSE Microsoft CScript Banner Outbound

SID: 2020085Rev: 10 views
History
Sourceet/open
CreatedJanuary 5, 2015
UpdatedJuly 26, 2019
Classificationsuccessful-admin
alert tcp $HOME_NET any -> $EXTERNAL_NET any (msg:"ET ATTACK_RESPONSE Microsoft CScript Banner Outbound"; flow:established; content:"Windows Script Host Version"; content:"Copyright |28|C|29|"; distance:0; content:"Microsoft Corp"; distance:0; classtype:successful-admin; sid:2020085; rev:1; metadata:created_at 2015_01_05, signature_severity Minor, updated_at 2019_07_26;)

Metadata

created at2015_01_05
signature severityMinor
updated at2019_07_26

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!