Detects attempts to access domains with a high risk of information leakage based on the Leak Risk Domains pattern group.
Overview
| Type | Stream |
|---|---|
| Referenced objects | Pattern group 정보유출 위험 도메인23 |
Query
1| matchsig field=domain guid="7f8d80e1-1646-4536-bb7f-fddb8a7ba360" verify=f
2| eval result = strjoin("\n", foreach(valueof(_1, "rule"), _matchsig_result)) | fields - _matchsig_result