ET DELETED Hash - Great Firewall of China Probe (via pcaps from https://nymity.ch/active-probing/) - Suricata Rule 2028247 (et/open)

ET DELETED Hash - Great Firewall of China Probe (via pcaps from https://nymity.ch/active-probing/)

SID: 2028247Rev: 20 viewsHistory

Sourceet/open

CreatedSeptember 10, 2019

UpdatedOctober 14, 2019

Classificationunknown

alert tls any any -> any any (msg:"ET DELETED Hash - Great Firewall of China Probe (via pcaps from https://nymity.ch/active-probing/)"; ja3_hash; content:"e76ac6872939f6ebfdf75f1ea73b4daf"; reference:url,github.com/trisulnsm/trisul-scripts/blob/master/lua/frontend_scripts/reassembly/ja3/prints/ja3fingerprint.json; classtype:unknown; sid:2028247; rev:2; metadata:created_at 2019_09_10, signature_severity Unknown, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2019_10_14;)

References

url	github.com/trisulnsm/trisul-scripts/blob/master/lua/frontend_scripts/reassembly/ja3/prints/ja3fingerprint.json

Metadata

created at2019_09_10

signature severityUnknown

tagDescription_Generated_By_Proofpoint_Nexus

updated at2019_10_14

Comments (0)

Please sign in to leave a comment.

No comments yet. Be the first to comment!