added-additional-matcher

2024-11-06 12:30:58 +05:30 · 2024-11-06 12:30:58 +05:30 · b5764073f7
parent 8a6d385127
commit b5764073f7
1 changed files with 4 additions and 1 deletions
--- a/network/detection/fortinet-fgfm-protocol-detect.yaml
+++ b/network/detection/fortinet-fgfm-protocol-detect.yaml
@ -1,4 +1,4 @@
-id: fortinet-fgfm-protocol-detect
+id: fortinet-fgfm-detect

 info:
  name: Fortinet FGFM protocol - Detect
@ -22,12 +22,15 @@ tcp:
    host:
      - "{{Hostname}}"
    port: 541
+
    read-size: 1024

    matchers:
      - type: word
        words:
          - ".fortinet.com"
+          - "Certificate Authority"
+        condition: and

    extractors:
      - type: regex