TGI HUNT Suspicious Content Type

SID: 2610644Rev: 116 views
History
Sourcetgreen/hunting
CreatedMarch 19, 2025
UpdatedMarch 19, 2025
Classificationbad-unknown
alert http any any -> any any (msg:"TGI HUNT Suspicious Content Type"; flow:established,to_client; http_content_type; content:"application/x-sh"; endswith; reference:url,gist.github.com/travisbgreen/a24c4ea2e11cb53b03b9b327bf07cf89; classtype:bad-unknown; sid:2610644; rev:1;)

References

urlgist.github.com/travisbgreen/a24c4ea2e11cb53b03b9b327bf07cf89

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!