""ET POLICY LDAPSv3 LDAPS_START_TLS Request Outbound""

SID: 2034719

Revision: 3

Class Type: bad-unknown

Metadata: attack_target Client_and_Server, created_at 2021_12_14, deployment Perimeter, signature_severity Informational, updated_at 2023_04_06

Reference:

Protocol: tcp

Source Network: [$HOME_NET,$HTTP_SERVERS]

Source Port: any

Destination Network: $EXTERNAL_NET

Destination Port: any

Flow: established,to_server

Contents:

  • Value: "|30 1d 02 01|" Depth: 4

  • Value: "|77 18 80 16 31 2e 33 2e 36 2e 31 2e 34 2e 31 2e 31 34 36 36 2e 32 30 30 33 37|"

Within:

PCRE:

Special Options:

  • fast_pattern

source