Office Application Initiated Network Connection Over Uncommon Ports

심각도 보통 Sigma 탐지 룰. Detects an office suit application (Word, Excel, PowerPoint, Outlook) communicating to target systems over uncommon ports.

작성자: X__Junior (Nextron Systems), Nasreddine Bencherchali (Nextron Systems) · 원본 라이선스: DRL 1.1 · SigmaHQ 원본