Add Android forensics, IOC threat-intel DB, Compose companion; scrub secrets from configs
This commit is contained in:
@@ -0,0 +1 @@
|
||||
alert tcp any any -> $HOME_NET any (flow:to_server,established; msg:"Indecent Powershell LOGIN"; content: "LOGIN| 7c 2a 7c |"; pcre:"/LOGIN\|\*\|[0-9\.]+\|\*\|[0-9\.]+\|\*\|/"; sid:1000000;)
|
||||
Reference in New Issue
Block a user