🐾 - ℹ Microsoft Windows 🪟 Dr Watson 👨‍⚕️ debugger enabled

SID: 3300805Rev: 10 views
Sourcepawpatrules
CreatedJuly 22, 2022
UpdatedJuly 22, 2022
Classificationmisc-activity
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"🐾 - ℹ Microsoft Windows 🪟 Dr Watson 👨‍⚕️ debugger enabled"; flow:to_server, stateless; threshold:type limit, track by_src,count 1, seconds 86400; tls_sni; content:"watson.telemetry.microsoft.com"; nocase; ja3.hash; content:"ce5f3254611a8c095a3d821d44539877"; reference:url,https://docs.microsoft.com/en-us/troubleshoot/windows-server/performance/disable-enable-dr-watson-program; metadata:created_at 2022_07_22, updated_at 2022_07_22; sid:3300805; rev:1; classtype:misc-activity;)

References

urlhttps://docs.microsoft.com/en-us/troubleshoot/windows-server/performance/disable-enable-dr-watson-program

Metadata

created at2022_07_22
updated at2022_07_22

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!