🐾 - ℹ Palo Alto - HTTP User-Agent Scanner 🕵 - 📧 scaninfo[AT]paloaltonetworks.com

SID: 3300986Rev: 21 views
Sourcepawpatrules
CreatedAugust 3, 2022
UpdatedFebruary 5, 2023
Classificationmisc-activity
alert http $EXTERNAL_NET any -> any any (msg:"🐾 - ℹ Palo Alto - HTTP User-Agent Scanner 🕵 - 📧 scaninfo[AT]paloaltonetworks.com"; flow:to_server, stateless; threshold:type limit, track by_src,count 1, seconds 86400; http.user_agent; content:"Expanse"; content:"Palo Alto Networks"; content:"scaninfo|40|paloaltonetworks.com"; fast_pattern; reference:url,https://expanse.co/; reference:url,https://www.paloaltonetworks.com/cortex/cortex-xpanse; metadata:created_at 2022_08_03, updated_at 2023_02_05; sid:3300986; rev:2; classtype:misc-activity;)

References

urlhttps://expanse.co/
urlhttps://www.paloaltonetworks.com/cortex/cortex-xpanse

Metadata

created at2022_08_03
updated at2023_02_05

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!