Description
Detects network traffic carrying the universal binary/Java class (CAFEBABE) signature. Identifying Java bytecode in transit supports inspection policies, since JAR payloads are a common malware delivery format.
FILE-IDENTIFY Universal Binary/Java Bytecode file magic detected
IPS-SWG
1 SID: 20492
