alert udp $HOME_NET any -> any 57621 (msg:"ET POLICY Spotify P2P? Client"; flow:to_server; dsize:44; content:"|53 70 6f 74 55 64 70 30|"; depth:8; threshold:type limit, count 1, track by_src, seconds 300; classtype:not-suspicious; sid:2027397; rev:1; metadata:affected_product Windows_Client_Apps, attack_target Client_Endpoint, deployment Internal, signature_severity Minor, created_at 2019_05_30, performance_impact Low, updated_at 2019_05_30;)

Added 2019-05-30 18:39:45 UTC


Topic revision: r1 - 2019-05-30 - TWikiGuest
 
This site is powered by the TWiki collaboration platform Powered by Perl This site is powered by the TWiki collaboration platformCopyright © Emerging Threats