ET HUNTING Suspicious Windows NT version 8 User-Agent

7.0.35.0SID: 2015821Rev: 8Enabled2 views
Sourceet/open
Fileemerging-hunting.rules
CreatedOctober 19, 2012
UpdatedMarch 17, 2024
Classificationbad-unknown
alert http $HOME_NET any -> $EXTERNAL_NET any (msg:"ET HUNTING Suspicious Windows NT version 8 User-Agent"; flow:established,to_server; http.user_agent; content:"Windows NT 8"; nocase; fast_pattern; content:!"NOKIA"; nocase; classtype:bad-unknown; sid:2015821; rev:8; metadata:created_at 2012_10_19, confidence Medium, signature_severity Informational, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2024_03_17;)

Metadata

created at2012_10_19
confidenceMedium
signature severityInformational
tagDescription_Generated_By_Proofpoint_Nexus
updated at2024_03_17

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!