Update red-lion-enip-detect.yaml

This commit is contained in:
Dhiyaneshwaran
2025-12-25 22:13:03 +05:30
committed by GitHub
parent 5a09892484
commit e0a8b5623d

View File

@@ -8,8 +8,6 @@ info:
Detects Red Lion industrial control devices by sending Ethernet/IP (ENIP) protocol requests to port 789 and identifying devices that respond with "Red Lion Controls" in their response. This template can be used to discover and fingerprint Red Lion devices on industrial networks.
metadata:
max-request: 2
vendor: Schneider
product: Modicon340
tags: ics,redlion,detect,network,tcp
tcp:
@@ -32,4 +30,4 @@ tcp:
- type: binary
part: info
binary:
- "526564204c696f6e20436f6e74726f6c73" # Red Lion Controls
- "526564204c696f6e20436f6e74726f6c73" # Red Lion Controls