DDI RULE 4768
2022年9月20日
DESCRIPTION NAME:
SUSPICIOUS WINREG - SMB2(REQUEST)
CONFIDENCE LEVEL:
SEVERITY INBOUND:
SEVERITY OUTBOUND:
Informational
Low
Medium
High
概要
詳細
Attack Phase: Point of Entry or Lateral Movement
Protocol: SMB2
Risk Type: MALWARE
Threat Type: Suspicious Behavior
Confidence Level: High
Severity: High(Inbound)| High(Outbound)
DDI Default Rule Status: Enable
APT Related: NO
対応方法
Network Content Inspection Pattern Version: 1.15023.00
Network Content Inspection Pattern Release Date: 16 Aug 2022
Network Content Correlation Pattern Version: 1.14865.00
Network Content Correlation Pattern Release Date: 16 Aug 2022
ご利用はいかがでしたか? アンケートにご協力ください