fix: remove wrong telnet rule

exein-io · Jul 2, 2024 · 0f4d0e9 · 0f4d0e9
1 parent 9f837a3
commit 0f4d0e9
Showing 1 changed file with 0 additions and 7 deletions.
diff --git a/rules/lateral_movement/telnet_network_activity.yaml b/rules/lateral_movement/telnet_network_activity.yaml
@@ -17,13 +17,6 @@
   description: Detects the execution of the Telnet utility. Attackers may use Telnet to establish a remote connection to a device or server.
   condition: header.image == "/usr/bin/telnet"
 
-- name: Telnet network activity - Accept
-  type: Accept
-  category: lateral_movement
-  severity: medium
-  description: Detects Telnet network activity. Attackers may use Telnet to establish a remote connection to a device or server.
-  condition: header.image == "/usr/bin/telnet" 
-
 - name: Telnet network activity - Connect
   type: Connect
   category: lateral_movement