Detects domain access used for remote control based on the Remote Control Service pattern group.
Overview
| Type | Stream |
|---|---|
| Referenced objects | Pattern group 원격제어 서비스10 |
Query
1| matchsig field=domain guid="54309dfc-47e4-43d6-9469-079f281051e0" verify=f
2| eval result = strjoin("\n", foreach(valueof(_1, "rule"), _matchsig_result)) | fields - _matchsig_result