🐾 - 🚨 Suspicious File 📂 Upload ↗ using Sendspace API - Possible Leak 🚱 / Malware 👾 - Suricata Rule 3300644 (pawpatrules)

🐾 - 🚨 Suspicious File 📂 Upload ↗ using Sendspace API - Possible Leak 🚱 / Malware 👾

SID: 3300644Rev: 10 views

Sourcepawpatrules

CreatedAugust 16, 2021

UpdatedAugust 16, 2021

Classificationpolicy-violation

alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"🐾 - 🚨 Suspicious File 📂 Upload ↗ using Sendspace API - Possible Leak 🚱 / Malware 👾"; tls.cert_subject; content:"CN=*.sendspace.com"; nocase; reference:url,https://www.sendspace.com/dev_howto.html; metadata:created_at 2021_08_16, updated_at 2021_08_16; sid:3300644; rev:1; classtype:policy-violation;)

References

url	https://www.sendspace.com/dev_howto.html

🐾 - 🚨 Suspicious File 📂 Upload ↗ using Sendspace API - Possible Leak 🚱 / Malware 👾

References

Metadata

Comments (0)