🐾 - 🔔 DCERPC - Windows 🪟 - Network Service Discovery 🥷 - T1046

SID: 3300330Rev: 10 views
Sourcepawpatrules
CreatedJuly 26, 2023
UpdatedJuly 26, 2023
Classificationattempted-recon
alert tcp-pkt any any -> $HOME_NET 445 (msg:"🐾 - 🔔 DCERPC - Windows 🪟 - Network Service Discovery 🥷 - T1046"; flow:to_server, stateless; content:"|4e 00 54 00 20 00 53 00 65 00 72 00 76 00 69 00 63 00 65 00 5c|"; fast_pattern; reference:url,https://attack.mitre.org/techniques/T1046/; reference:url,https://www.pingcastle.com/; metadata:created_at 2023_07_26, updated_at 2023_07_26; sid:3300330; rev:1; classtype:attempted-recon;)

References

urlhttps://attack.mitre.org/techniques/T1046/
urlhttps://www.pingcastle.com/

Metadata

created at2023_07_26
updated at2023_07_26

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!