Description
Detects network traffic carrying the Microsoft cabinet (CAB) archive signature. CAB archives package malware stages and installers, so identification supports inspection and blocking policies.
FILE-IDENTIFY Microsoft Windows CAB file magic detected
IPS-SWG
1 SID: 20461