🐾 - ℹ SentinelOne 🇮🇱 🇺🇸 Endpoint agent 🛡 for 🪟 Windows 11

SID: 3301100Rev: 310 views
Sourcepawpatrules
CreatedDecember 27, 2023
UpdatedJanuary 25, 2024
Classificationmisc-activity
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"🐾 - ℹ SentinelOne 🇮🇱 🇺🇸 Endpoint agent 🛡 for 🪟 Windows 11"; flow:to_server, stateless; threshold:type limit, track by_src,count 1, seconds 86400; ssl_version:tls1.2; ja3.hash; content:"6a5d235ee78c6aede6a61448b4e9ff1e"; fast_pattern; tls_sni; content:"sentinelone.net"; nocase; endswith; reference:url,https://www.sentinelone.com; metadata:created_at 2023_12_27, updated_at 2024_01_25; sid:3301100; rev:3; classtype:misc-activity;)

References

urlhttps://www.sentinelone.com

Metadata

created at2023_12_27
updated at2024_01_25

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!