event-generator icon indicating copy to clipboard operation
event-generator copied to clipboard

event on `Disallowed SSH connection non standard port`

Open h4l0gen opened this issue 1 year ago • 1 comments

Motivation his rule holds the potential to detect a family of reverse shells

Feature adding an event for triggering this rule

Alternatives

Additional context

/assign

h4l0gen avatar Mar 19 '24 07:03 h4l0gen

/assign

h4l0gen avatar Mar 19 '24 07:03 h4l0gen