Possible Zero Day download - logging only rule

Version 1

    Use this rule to identify possible zero day downloads.  This rule can easily be changed to a block rule.

     

    This rule should go AFTER your anti-malware rule.