🐾 - 🚨 TLS Connection ➡ Google MTALK (TCP/5228) service 👀
Sourcepawpatrules
CreatedMarch 18, 2022
UpdatedAugust 2, 2022
Classificationpolicy-violation
alert tls $HOME_NET any -> $EXTERNAL_NET 5228 (msg:"🐾 - 🚨 TLS Connection ➡ Google MTALK (TCP/5228) service 👀"; flow:to_server, stateless; threshold:type limit, track by_src,count 1, seconds 86400; tls_sni; content:"mtalk.google.com"; nocase; metadata:created_at 2022_03_18, updated_at 2022_08_02; sid:3300211; rev:4; classtype:policy-violation;)
Metadata
created at2022_03_18
updated at2022_08_02
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!