🐾 - 🚨 Suspicious TLS Certificate : CN=localhost - Suricata Rule 3300660 (pawpatrules)

🐾 - 🚨 Suspicious TLS Certificate : CN=localhost

SID: 3300660Rev: 2Enabled4 views

FilePAW-PATRULES_MALWARES.rules

CreatedFebruary 15, 2022

UpdatedDecember 3, 2022

Classificationtrojan-activity

alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"🐾 - 🚨 Suspicious TLS Certificate : CN=localhost"; flow:to_client, stateless; tls.cert_subject; content:"CN=localhost"; nocase; metadata:created_at 2022_02_15, updated_at 2022_12_03; sid:3300660; rev:2; classtype:trojan-activity;)

Metadata

created at2022_02_15

updated at2022_12_03

Comments (0)

Please sign in to leave a comment.

No comments yet. Be the first to comment!