SUSPICIOUS [PTsecurity] MKCOL method in HTTP Request
Sourceptrules/open
CreatedSeptember 25, 2025
UpdatedMarch 11, 2026
Classificationmisc-activity
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"SUSPICIOUS [PTsecurity] MKCOL method in HTTP Request"; flow:established, to_server; urilen:>2; http.method; content:"MKCOL"; startswith; threshold:type limit, track by_src, seconds 300, count 1; reference:url, app.any.run/tasks/cdb665b2-f591-4fa6-9e70-478d01d1ee96/; reference:url, rules.ptsecurity.com; classtype:misc-activity; sid:10008219; rev:4;)
Comments (0)
Please sign in to leave a comment.
Sign inNo comments yet. Be the first to comment!