""ET POLICY SN and CN From MS TS Revoked Cert Chain Seen""
SID: 2014870
Revision: 3
Class Type: bad-unknown
Metadata: created_at 2012_06_08, updated_at 2012_06_08
Reference:
-
md5
-
1f61d280067e2564999cac20e386041c
Protocol: tcp
Source Network: any
Source Port: $HTTP_PORTS
Destination Network: $HOME_NET
Destination Port: any
Flow: established,from_server
Contents:
-
Value: "|c1 00 8b 3c 3c 88 11 d1 3e f6 63 ec df 40|"
-
Value: "Microsoft Root Authority"
-
Value: "Microsoft Enforced Licensing Intermediate PCA"
-
Value: "|61 1a 02 b7 00 02 00 00 00 12|"
-
Value: "Microsoft Enforced Licensing Registration Authority CA"
Within: 54
PCRE:
Special Options: