Skip to content

RA3405: Block Process By Executable Content Pattern

Summary

ID RA3405
Brief Description Block a process execution by its executable content pattern (i.e. specific string, keyword, binary pattern etc)
Author your name/nickname/twitter
Creation Date YYYY/MM/DD
Requirements
  • DN_zeek_conn_log
References
Response Stage Containment

Description

Description of the extended_description for single Response Action in markdown format. Here newlines will be saved.