🐾 - 🚨 Suspicious TLS Certificate : CN=example.com
Sourcepawpatrules
CreatedNovember 24, 2021
UpdatedDecember 3, 2022
Classificationtrojan-activity
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"🐾 - 🚨 Suspicious TLS Certificate : CN=example.com"; flow:to_client, stateless; tls.cert_subject; content:"CN=example.com"; nocase; metadata:created_at 2021_11_24, updated_at 2022_12_03; sid:3300658; rev:2; classtype:trojan-activity;)
Metadata
created at2021_11_24
updated at2022_12_03
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!