Update Azure Firewall - Uncommon Port for Organization.yaml
This commit is contained in:
Родитель
9adc46e50a
Коммит
73dacdf456
|
@ -1,7 +1,7 @@
|
|||
id: 8812a547-13e6-4d0c-b38d-476fb7351c52
|
||||
name: Uncommon Port for Organization
|
||||
description: |
|
||||
'Identifies abnormal ports used in the organization based on learning period activity. This can indicate exfiltration attack or C2 control from machines in the organization by using new a port that has never been used on any machine in the organization.'
|
||||
'Identifies abnormal ports used in the organization based on learning period activity. This can indicate exfiltration attack or C2 control from machines in the organization by using new a port that has never been used.'
|
||||
requiredDataConnectors:
|
||||
- connectorId: AzureFirewall
|
||||
dataTypes:
|
||||
|
|
Загрузка…
Ссылка в новой задаче