diff --git a/rules/web/web_susp_useragents.yml b/rules/web/web_susp_useragents.yml index db0a7569d..39aa1ded5 100644 --- a/rules/web/web_susp_useragents.yml +++ b/rules/web/web_susp_useragents.yml @@ -2,8 +2,9 @@ title: Suspicious User-Agents Related To Recon Tools id: 19aa4f58-94ca-45ff-bc34-92e533c0994a status: experimental description: Detects known suspicious (default) user-agents related to scanning/recon tools -author: Nasreddine Bencherchali +author: Nasreddine Bencherchali, Tim Shelton date: 2022/07/19 +modified: 2022/07/21 tags: - attack.initial_access - attack.t1190 @@ -20,6 +21,7 @@ detection: - 'Wfuzz/' - 'WPScan v' - 'Recon-ng/v' + - 'GIS - AppSec Team - Project Vision' condition: selection falsepositives: - Unknown