🐾 - 🚨 HTTP Connection ➡ Internet from 👴 possible 🪟 Windows 7 or Windows Server 2008

SID: 3300018Rev: 30 views
Sourcepawpatrules
CreatedJanuary 30, 2023
UpdatedAugust 25, 2023
Classificationpolicy-violation
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"🐾 - 🚨 HTTP Connection ➡ Internet from 👴 possible 🪟 Windows 7 or Windows Server 2008"; flow:to_server, stateless; threshold:type limit, track by_src,count 1, seconds 86400; http.user_agent; content:"Windows NT 6.1"; fast_pattern; nocase; reference:url,https://learn.microsoft.com/en-us/lifecycle/products/windows-7?branch=live; metadata:created_at 2023_01_30, updated_at 2023_08_25; sid:3300018; rev:3; classtype:policy-violation;)

References

urlhttps://learn.microsoft.com/en-us/lifecycle/products/windows-7?branch=live

Metadata

created at2023_01_30
updated at2023_08_25

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!