Inbound traffic from known StyleSmuggler attacker source IPs
Detects inbound network connections from known IP addresses associated with the StyleSmuggler malware distribution, which is used to inject malicious scripts into web applications.
Suricata
