Bluetooth OBEX Protocol Data Transfer Detected

Darshan Thummar@Mighty

•updated Jun 12, 2026•0•0•11

This rule detects Bluetooth Object Exchange (OBEX) Protocol data transfer activity on TCP port 3232. The rule is configured to alert when five such data transfers are observed from the same source IP within a 60-second window, indicating potential exfiltration or unauthorized data movement over Bluetooth.