🐾 - 🚨 Powershell 🌐 (Windows Server 2016 🪟) - TLSv1.0 connection to IP address

SID: 3321303Rev: 177 views
Sourcepawpatrules
CreatedJuly 19, 2024
UpdatedJuly 20, 2024
Classificationpolicy-violation
alert tls $HOME_NET any -> any any (msg:"🐾 - 🚨 Powershell 🌐 (Windows Server 2016 🪟) - TLSv1.0 connection to IP address"; flow:to_server, stateless; ja3.hash; content:"17b69de9188f4c205a00fe5ae9c1151f"; metadata:former_category JA3; reference:url,https://learn.microsoft.com/en-us/powershell/; metadata:created_at 2024_07_20, updated_at 2024_07_20; sid:3321303; rev:1; classtype:policy-violation;)

References

urlhttps://learn.microsoft.com/en-us/powershell/

Metadata

former categoryJA3

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!