ET FILE_SHARING Microsoft Online Storage Client Hello TLSv1 Possible OneDrive (storage.msn .com)

7.0.35.0SID: 2014919Rev: 4Enabled1 views
Sourceet/open
Fileemerging-file_sharing.rules
CreatedJune 19, 2012
UpdatedJune 27, 2024
Classificationpolicy-violation
alert tcp $EXTERNAL_NET 443 -> $HOME_NET any (msg:"ET FILE_SHARING Microsoft Online Storage Client Hello TLSv1 Possible OneDrive (storage.msn .com)"; flow:established,to_client; dsize:>19; content:"|16 03 01|"; depth:3; content:".storage.msn.com"; nocase; distance:0; reference:url,skydrive.live.com; classtype:policy-violation; sid:2014919; rev:4; metadata:created_at 2012_06_19, former_category INFO, confidence Medium, signature_severity Informational, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2024_06_27;)

References

urlskydrive.live.com

Metadata

created at2012_06_19
former categoryINFO
confidenceMedium
signature severityInformational
tagDescription_Generated_By_Proofpoint_Nexus
updated at2024_06_27

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!