Update Azure Firewall - Uncommon Port for Organization.yaml

This commit is contained in:
shabaz-github 2023-06-21 18:46:32 +05:30 коммит произвёл GitHub
Родитель 9adc46e50a
Коммит 73dacdf456
Не найден ключ, соответствующий данной подписи
Идентификатор ключа GPG: 4AEE18F83AFDEB23
1 изменённых файлов: 1 добавлений и 1 удалений

Просмотреть файл

@ -1,7 +1,7 @@
id: 8812a547-13e6-4d0c-b38d-476fb7351c52
name: Uncommon Port for Organization
description: |
'Identifies abnormal ports used in the organization based on learning period activity. This can indicate exfiltration attack or C2 control from machines in the organization by using new a port that has never been used on any machine in the organization.'
'Identifies abnormal ports used in the organization based on learning period activity. This can indicate exfiltration attack or C2 control from machines in the organization by using new a port that has never been used.'
requiredDataConnectors:
- connectorId: AzureFirewall
dataTypes: