🐾 - 🚨 LocalTunnel SSL Tunnel opened - Local network Linux 🐧 machine exposed on internet 🌐 - Possible file exfiltration 🗃 - Suricata Rule 3300222 (pawpatrules)

🐾 - 🚨 LocalTunnel SSL Tunnel opened - Local network Linux 🐧 machine exposed on internet 🌐 - Possible file exfiltration 🗃

SID: 3300222Rev: 10 views

Sourcepawpatrules

CreatedDecember 4, 2022

UpdatedDecember 4, 2022

Classificationpolicy-violation

alert tls $HOME_NET any -> any any (msg:"🐾 - 🚨 LocalTunnel SSL Tunnel opened - Local network Linux 🐧 machine exposed on internet 🌐 - Possible file exfiltration 🗃"; flow:to_server, stateless; ja3.hash; content:"398430069e0a8ecfbc8db0778d658d77"; tls_sni; content:"localtunnel.me"; metadata:former_category JA3; reference:url,https://theboroer.github.io/localtunnel-www/; metadata:created_at 2022_12_04, updated_at 2022_12_04; sid:3300222; rev:1; classtype:policy-violation;)

References

url	https://theboroer.github.io/localtunnel-www/

🐾 - 🚨 LocalTunnel SSL Tunnel opened - Local network Linux 🐧 machine exposed on internet 🌐 - Possible file exfiltration 🗃

References

Metadata

Comments (0)