SUSPICIOUS [PTsecurity] Dropbox SSL Payload Request

SID: 11001738Rev: 10 views
Sourceptresearch/attackdetection
CreatedAugust 8, 2017
UpdatedAugust 8, 2017
Classificationmisc-activity
alert tls $HOME_NET any -> $EXTERNAL_NET any (msg:"SUSPICIOUS [PTsecurity] Dropbox SSL Payload Request"; flow:established, to_server; content:"|1703 0101 A0|"; depth:5; fast_pattern; flowbits:isset, FB309001_0; flowbits:unset, FB309001_0; flowbits:set, FB309001_1; classtype:misc-activity; metadata:created_at 2017_8_8; reference:url, github.com/ptresearch/AttackDetection; sid:11001738; rev:1;)

References

urlgithub.com/ptresearch/AttackDetection

Metadata

created at2017_8_8

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!