Skip to content

RA3402: Block Process By Executable Metadata

Summary

ID RA3402
Brief Description Block a process execution by its executable metadata (i.e. signature, permissions, MAC times)
Author your name/nickname/twitter
Creation Date YYYY/MM/DD
Requirements
  • DN_zeek_conn_log
References
Response Stage Containment

Description

Description of the extended_description for single Response Action in markdown format. Here newlines will be saved.