alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"🐾 - 🪟 Windows 10 version 22H2"; flow:to_server, stateless; threshold:type limit, track by_src,count 1, seconds 86400; http.user_agent; content:"Windows NT 10.0"; fast_pattern; nocase; content:"10.0.0.0.19045"; nocase; reference:url,https://en.wikipedia.org/wiki/Windows_10_version_history; reference:url,https://endoflife.date/windows; metadata:created_at 2023_02_03, updated_at 2023_02_03; sid:3300734; rev:1; classtype:misc-activity;)