ET INFO Observed powershell Command via Inbound ICMP

SID: 2062643Rev: 130 views
Sourceet/open
CreatedMay 30, 2025
UpdatedMay 30, 2025
Classificationmisc-activity
alert icmp any any -> [$HOME_NET,$HTTP_SERVERS] any (msg:"ET INFO Observed powershell Command via Inbound ICMP"; content:"powershell|20|"; nocase; classtype:misc-activity; sid:2062643; rev:1; metadata:created_at 2025_05_30, signature_severity Unknown, updated_at 2025_05_30;)

Metadata

created at2025_05_30
signature severityUnknown
updated at2025_05_30

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!