🐾 - 🚨 Python-based 🐍 application with Google Analytics telemetry enabled - Possible Leak 🚱 - Suricata Rule 3321278 (pawpatrules)

🐾 - 🚨 Python-based 🐍 application with Google Analytics telemetry enabled - Possible Leak 🚱

SID: 3321278Rev: 12 views

Sourcepawpatrules

CreatedJune 4, 2024

UpdatedJune 5, 2024

Classificationpolicy-violation

alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"🐾 - 🚨 Python-based 🐍 application with Google Analytics telemetry enabled - Possible Leak 🚱"; flow:to_server, stateless; threshold:type limit, track by_src,count 1, seconds 86400; tls_sni; content:"www.google-analytics.com"; nocase; endswith; ja3.hash; content:"8d9f7747675e24454cd9b7ed35c58707"; fast_pattern; reference:url,https://developers.google.com/analytics/devguides/reporting/core/v3/quickstart/installed-py; metadata:created_at 2024_06_05, updated_at 2024_06_05; sid:3321278; rev:1; classtype:policy-violation;)

References

url	https://developers.google.com/analytics/devguides/reporting/core/v3/quickstart/installed-py

🐾 - 🚨 Python-based 🐍 application with Google Analytics telemetry enabled - Possible Leak 🚱

References

Metadata

Comments (0)