rule bulwark_https_bulwarkblack_com_msi_radix_axe6600_command_injection_edge_defense
{
    meta:
        author = "Bulwark Black LLC"
        source = "https://bulwarkblack.com/msi-radix-axe6600-command-injection-edge-defense/"
        description = "Auto-extracted indicators. Verify before use; not a behavioral detection rule."
        generated = "2026-08-09T20:13:20Z"
        tlp = "TLP:CLEAR"
        indicator_count = "6"
    strings:
        $s0 = "us.msi.com" ascii wide nocase  // Domains
        $s1 = "www.msi.com" ascii wide nocase  // Domains
        $s2 = "www.vulncheck.com" ascii wide nocase  // Domains
        $s3 = "https://us.msi.com/Networking/RadiX-AXE6600-WiFi-6E-Tri-Band-Gaming-Router/support" ascii wide nocase  // URLs
        $s4 = "https://www.msi.com/" ascii wide nocase  // URLs
        $s5 = "https://www.vulncheck.com/advisories/msi-radix-axe6600-v781521-command-injection-via-openvpn-function" ascii wide nocase  // URLs
    condition:
        any of ($s*)
}