I find the pcre section on this rule suspect… It appears that the regex is looking for zero to unlimited occurrences of many things. But basically just matches on content:sh
Can someone please review?
I find the pcre section on this rule suspect… It appears that the regex is looking for zero to unlimited occurrences of many things. But basically just matches on content:sh
Can someone please review?