About EricAghasian

EricAghasian · ‎05-19-2021

Hi KRisselada, You cannot find any list of BIOC rules per my knowledge and a follow up with Palo Engineers. These are preconfigured rules from Palo Alto Networks with no intention to share (if they share, protection would go undermine). Regards

EricAghasian · ‎11-23-2020

I have already opened the case with them and they confirmed my case as a FP but the issue is that there is no explanation about it. As long as there is no explanation, it cannot be decide whether the alert is a FP or a real threat.

EricAghasian · ‎11-08-2020

Hi Guys, In the Cortex XDR, we are getting an alert indicating Behavioral threat detected (rule: bioc.syscall.remote banker behavior). Although the file is blocked which is benign, the is no information related to the rule. Does anyone have a clear idea about the rule? Regards

EricAghasian · ‎10-18-2020

Dear all, Just wondering if there is a way to add exceptions to a rule based on the source and destination zone rather than the IPs itself? Regards

Member Since	‎10-04-2020 04:14 PM
Date Last Visited	‎07-15-2021 03:32 AM
Posts	4
Total Likes Received	2

Online Status	Offline
Date Last Visited	‎07-15-2021 03:32 AM

About EricAghasian

Re: Behavioral threat detected (rule: bioc.syscall.remote banker behavior)

Re: Behavioral threat detected (rule: bioc.syscall.remote banker behavior)

Behavioral threat detected (rule: bioc.syscall.remote banker behavior)

Rule exceptions based on the src & dst zones

Behavioral threat detected (rule: bioc.syscall.remote banker behavior)

DOTW: TCP Resets from Client and Server aka TCP-RST-FROM-Client

Re: To drop or deny

Re: Rule exceptions based on the src & dst zones

Re: Behavioral threat detected (rule: bioc.syscall.remote banker behavior)

Re: Behavioral threat detected (rule: bioc.syscall.remote banker behavior)

Behavioral threat detected (rule: bioc.syscall.remote banker behavior)

Rule exceptions based on the src & dst zones