security-tools/blue-team-tools
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

Merge pull request #3262 from redsand/improvement_add_additional_useragent

Browse Source 
Feature improvement to add an additional known user agent seen in the…
This commit is contained in:
Florian Roth
2022-07-22 21:07:03 +02:00
committed by GitHub
parent 8f36f332fc 3c015a9c78
commit ff6384aabb
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
rules/web/web_susp_useragents.yml
+3 -1
View File
@@ -2,8 +2,9 @@ title: Suspicious User-Agents Related To Recon Tools
id: 19aa4f58-94ca-45ff-bc34-92e533c0994a
status: experimental
description: Detects known suspicious (default) user-agents related to scanning/recon tools
author: Nasreddine Bencherchali
author: Nasreddine Bencherchali, Tim Shelton
date: 2022/07/19
modified: 2022/07/21
tags:
- attack.initial_access
- attack.t1190
@@ -20,6 +21,7 @@ detection:
- 'Wfuzz/'
- 'WPScan v'
- 'Recon-ng/v'
- 'GIS - AppSec Team - Project Vision'
condition: selection
falsepositives:
- Unknown