TCP.Split.Handshake
Description
This indicates the detection of TCP Split Handshake packets.
Affected Products
Any Operating System
Impact
Protocol Anomaly: Attackers can gain system information to prepare for further attacks.
Recommended Actions
This indicates detection of traffic that does not comply with the protocol standard. Monitor the traffic from that network for any suspicious activity.
Telemetry
Coverage
IPS (Regular DB) | |
IPS (Extended DB) |