Description
Detects network traffic carrying the Microsoft OneNote file signature. OneNote attachments became a common phishing delivery format for malicious scripts, so identification supports inspection and blocking policies.
FILE-IDENTIFY Microsoft OneNote file magic detected
IPS-SWG
1 SID: 61524