🐾 - 🚨 Powershell 🌐 (Windows 11 🪟) - TLSv1.3 connection to IP Address - Suricata Rule 3301088 (pawpatrules)

🐾 - 🚨 Powershell 🌐 (Windows 11 🪟) - TLSv1.3 connection to IP Address

SID: 3301088Rev: 14 views

Sourcepawpatrules

CreatedNovember 5, 2023

UpdatedNovember 5, 2023

Classificationpolicy-violation

alert tls $HOME_NET any -> any any (msg:"🐾 - 🚨 Powershell 🌐 (Windows 11 🪟) - TLSv1.3 connection to IP Address"; flow:to_server, stateless; ja3.hash; content:"4d5efa96609dc906f796e63cff009c2a"; fast_pattern; metadata:former_category JA3; reference:url,https://learn.microsoft.com/en-us/powershell/; metadata:created_at 2023_11_05, updated_at 2023_11_05; sid:3301088; rev:1; classtype:policy-violation;)

References

url	https://learn.microsoft.com/en-us/powershell/

🐾 - 🚨 Powershell 🌐 (Windows 11 🪟) - TLSv1.3 connection to IP Address

References

Metadata

Comments (0)