alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"🐾 - 🚨 GoTo Connect on Windows 🪟"; flow:to_server, stateless; ja3.hash; content:"bd0bf25947d4a37404f0424edf4db9ad"; fast_pattern; tls_sni; content:"jive.com"; endswith; nocase; reference:url,https://www.goto.com/fr/connect; metadata:created_at 2023_06_29, updated_at 2023_06_29; sid:3300228; rev:1; classtype:policy-violation;)