🐾 - 🚨 APT package management 🪟 Microsoft repository

SID: 3300047Rev: 10 views
Sourcepawpatrules
CreatedJune 11, 2022
UpdatedJune 11, 2022
Classificationpolicy-violation
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"🐾 - 🚨 APT package management 🪟 Microsoft repository"; flow:to_server, stateless; threshold:type limit, track by_src,count 1, seconds 86400; http.host.raw; content:"packages.microsoft.com"; http.user_agent; content:"APT-HTTP|2F|"; nocase; reference:url,https://docs.microsoft.com/en-us/windows-server/administration/linux-package-repository-for-microsoft-software; metadata:created_at 2022_06_11, updated_at 2022_06_11; sid:3300047; rev:1; classtype:policy-violation;)

References

urlhttps://docs.microsoft.com/en-us/windows-server/administration/linux-package-repository-for-microsoft-software

Metadata

created at2022_06_11
updated at2022_06_11

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!