1014211647.yaml

id: autosys
info:
  name: CA AutoSys RCS Listener
  author: nmap,cn-kali-team
  tags: detect,tech,autosys,service
  severity: info
  metadata:
    info: not authorized
    rarity: 0
    version: $1
tcp:
- name: 'null'
  inputs:
  - data: ''
  host:
  - '{{Hostname}}'
  extractors:
  - name: autosys
    type: regex
    regex:
    - ^([\w._-]+)\nListener for [\w._-]+ AutoSysAdapter\nEOS\nExit Code = 1001\nIP <[\d.]+> is not authorized for this request\. Please contact your Web Administrator\.\nEOS\n