sap ftp session to unapproved host
Detects when an SAP process opens an FTP session to a host that is not on the approved server list.
YARA-L

Detects when an SAP process opens an FTP session to a host that is not on the approved server list.

Already have an account?