ip_reputation/otx_iprep.rules
2022-03-04 14:03:31 +03:00

2 lines
151 B
Plaintext

alert ip $HOME_NET any -> any any (msg:"OTX internal host talking to host known in pulse"; flow:to_server; iprep:dst,Pulse,>,30; sid:41414141; rev:1;)