DDI RULE 4768
Publish Date: 20 settembre 2022
DESCRIPTION NAME:
SUSPICIOUS WINREG - SMB2(REQUEST)
CONFIDENCE LEVEL: HIGH
SEVERITY INBOUND:
SEVERITY OUTBOUND:
Informativo
Basso
Medio
Alto
Panoramica e descrizione
Dettagli tecnici
Attack Phase: Point of Entry or Lateral Movement
Protocol: SMB2
Risk Type: MALWARE
Threat Type: Suspicious Behavior
Confidence Level: High
Severity: High(Inbound)| High(Outbound)
DDI Default Rule Status: Enable
APT Related: NO
Soluzioni
Network Content Inspection Pattern Version: 1.15023.00
Network Content Inspection Pattern Release Date: 16 Aug 2022
Network Content Correlation Pattern Version: 1.14865.00
Network Content Correlation Pattern Release Date: 16 Aug 2022
Sondaggio