🐾 - 🔔 Potential Massive Port Scan from local network - Possible Lateral Movement 🥷 - T1110 - Suricata Rule 3300317 (pawpatrules)

🐾 - 🔔 Potential Massive Port Scan from local network - Possible Lateral Movement 🥷 - T1110

SID: 3300317Rev: 20 views

Sourcepawpatrules

CreatedJune 18, 2022

UpdatedJune 18, 2022

Classificationattempted-recon

alert tcp $HOME_NET any -> any any (msg:"🐾 - 🔔 Potential Massive Port Scan from local network - Possible Lateral Movement 🥷 - T1110"; flow:to_server, stateless; flags:S,12; threshold:type threshold, track by_src, count 150, seconds 1; reference:url,https://capec.mitre.org/data/definitions/287.html; reference:url,https://attack.mitre.org/techniques/T1110/; classtype:attempted-recon; sid:3300317; rev:2; metadata:created_at 2022_06_18, updated_at 2022_06_18;)

References

url	https://capec.mitre.org/data/definitions/287.html
url	https://attack.mitre.org/techniques/T1110/

🐾 - 🔔 Potential Massive Port Scan from local network - Possible Lateral Movement 🥷 - T1110

References

Metadata

Comments (0)