🐾 - 🚨 HTTP connexion to Internet 🌐 initiated from Microsoft Word 📘 - Possible malicious link 👿 - Suricata Rule 3300089 (pawpatrules)

🐾 - 🚨 HTTP connexion to Internet 🌐 initiated from Microsoft Word 📘 - Possible malicious link 👿

SID: 3300089Rev: 10 views

Sourcepawpatrules

CreatedAugust 9, 2023

UpdatedAugust 9, 2023

Classificationpolicy-violation

alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"🐾 - 🚨 HTTP connexion to Internet 🌐 initiated from Microsoft Word 📘 - Possible malicious link 👿"; flow:to_server, stateless; http.user_agent; content:"Microsoft Office Word"; fast_pattern; startswith; nocase; http.method; content:"HEAD"; metadata:created_at 2023_08_09, updated_at 2023_08_09; sid:3300089; rev:1; classtype:policy-violation;)

🐾 - 🚨 HTTP connexion to Internet 🌐 initiated from Microsoft Word 📘 - Possible malicious link 👿

Metadata

Comments (0)