DDI RULE 4768
Publish date: 20 de septiembre de 2022
DESCRIPTION NAME:
SUSPICIOUS WINREG - SMB2(REQUEST)
CONFIDENCE LEVEL: HIGH
SEVERITY INBOUND:
SEVERITY OUTBOUND:
Informativo
Bajo
Medio
High
Resumen y descripción
Detalles técnicos
Attack Phase: Point of Entry or Lateral Movement
Protocol: SMB2
Risk Type: MALWARE
Threat Type: Suspicious Behavior
Confidence Level: High
Severity: High(Inbound)| High(Outbound)
DDI Default Rule Status: Enable
APT Related: NO
Soluciones
Network Content Inspection Pattern Version: 1.15023.00
Network Content Inspection Pattern Release Date: 16 Aug 2022
Network Content Correlation Pattern Version: 1.14865.00
Network Content Correlation Pattern Release Date: 16 Aug 2022
Rellene nuestra encuesta!