From 285ced48116eb6bf9f8b987f24560c90c7c80da1 Mon Sep 17 00:00:00 2001 From: pussycat0x <65701233+pussycat0x@users.noreply.github.com> Date: Wed, 22 May 2024 14:02:07 +0530 Subject: [PATCH] Delete network/detection/smb-detect.yaml --- network/detection/smb-detect.yaml | 27 --------------------------- 1 file changed, 27 deletions(-) delete mode 100644 network/detection/smb-detect.yaml diff --git a/network/detection/smb-detect.yaml b/network/detection/smb-detect.yaml deleted file mode 100644 index cf3c61f95e..0000000000 --- a/network/detection/smb-detect.yaml +++ /dev/null @@ -1,27 +0,0 @@ -id: smb-detect - -info: - name: SMB Detection - author: pussycat0x - severity: low - description: | - SMB (Server Message Block) is a network-layered protocol mainly used on Windows for sharing files, printers, and communication between network-attached computers. SMB related vulnerabilities can be levaraged to compromise large-scale systems. - metadata: - max-request: 1 - tags: network,windows,linux,smb,service,detect - -tcp: - - inputs: - - data: 00000031ff534d4272000000001845680000000000000000000000000000be2200000100000e00024e54204c4d20302e3132000200 - type: hex - - host: - - "{{Hostname}}" - port: 445 - - matchers: - - type: word - words: - - "SMBr" - - "NT LM" - condition: or