Rules by Product and UseCase

October 24, 2023 · View on GitHub

Vendor: Postfix

Product: Postfix

Use-Case: Malware

RulesModelsMITRE ATT&CK® TTPsActivity TypesParsers
10122
Event TypeRulesModels
dlp-email-alert-inT1190 - Exploit Public Fasing Application
DLP-Log4j-String-2: There was an attempt via email message to exploit the CVE-2021-44228 vulnerability using known keywords.
dlp-email-alert-outT1190 - Exploit Public Fasing Application
DLP-Log4j-String-2: There was an attempt via email message to exploit the CVE-2021-44228 vulnerability using known keywords.