Old TLS1.0/TLS1.1 Protocol Version Enabled

Rule Info

Name
Old TLS1.0/TLS1.1 Protocol Version Enabled
Author
Nasreddine Bencherchali (Nextron Systems)
Description
Detects applications or users re-enabling old TLS versions by setting the "Enabled" value to "1" for the "Protocols" registry key.
Reference
https://techcommunity.microsoft.com/t5/windows-it-pro-blog/tls-1-0-and-tls-1-1-soon-to-be-disabled-in-windows/ba-p/3887947
Date
2023-09-05 00:00:00
Modified
None
Id
439957a7-ad86-4a8f-9705-a28131c6821b
Tags
attack.defense_evasion DEMO
Type
Community Rule
Link to Public Repo
https://github.com/SigmaHQ/sigma/search?q=439957a7-ad86-4a8f-9705-a28131c6821b

Rule History

Author
Title
Date
Commit
github-actions[bot]
Merge PR #4891 from @nasbench - Promote older rules status from `experimental` to `test`
2024-07-01
47085e948
Nasreddine Bencherchali
Merge PR #4406 from @nasbench - Multiple Updates & Additions
2023-09-07
bdffe3a7f
THOR Logo  Scan your endpoints, forensic images or collected files with our portable scanner THOR
  Warning: Access to VALHALLA is rate-limited - once you prove unworthy, access gets denied
  Nextron Systems 2022