How to understand what the ips rule was triggered on?

N

naruto_hokagi2020-11-08 16:24:12

Cisco

naruto_hokagi, 2020-11-08 16:24:12

How to determine why and exactly what the ips

OS-WINDOWS Microsoft Windows RDP DecompressUnchopper integer overflow attempt rule triggered.

As I understand it, this rule is related to a buffer overflow during an RDP connection, but how to figure out if the vulnerability was exported or not? Payload analysis yielded nothing

Reply

Answer the question

In order to leave comments, you need to log in

0 answer(s)