🐾 - 🚨 HTTP Connection ➡ Internet from Powershell 🕵‍♂️ - Suricata Rule 3300014 (pawpatrules)

🐾 - 🚨 HTTP Connection ➡ Internet from Powershell 🕵‍♂️

SID: 3300014Rev: 70 views

Sourcepawpatrules

CreatedMay 8, 2021

UpdatedJune 11, 2022

Classificationpolicy-violation

alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"🐾 - 🚨 HTTP Connection ➡ Internet from Powershell 🕵‍♂️"; flow:to_server, stateless; http.user_agent; content:"WindowsPowerShell/"; nocase; metadata:created_at 2021_05_08, updated_at 2022_06_11; sid:3300014; rev:7; classtype:policy-violation;)

Metadata

created at2021_05_08

updated at2022_06_11

Comments (0)

Please sign in to leave a comment.

No comments yet. Be the first to comment!