Netskope Threat Labs

FILE-IDENTIFY XML file magic detected

IPS-CFW

2 SIDs: 21480, 21498

Detects network traffic carrying XML content signatures. XML transfers are usually benign configuration or data exchange, so the signature provides visibility for content inspection policies rather than marking an attack.

No cross-references or related blog posts found for this signature.