ET POLICY Mobile Device Posting Phone Number

alert http $HOME_NET any -> $EXTERNAL_NET any (
    msg:"ET POLICY Mobile Device Posting Phone Number";
    flow:established,to_server;
    http.method;
    content:"POST"; nocase;
    http.uri;
    content:"&Phone"; fast_pattern; nocase;
    content:"Number="; nocase;
    pcre:"/\x26Phone(Number\x3D|\x5FNumber\x3D|\x2DNumber\x3D)/i";
    classtype:policy-violation;
    sid:2013208; rev:4;
    metadata:created_at 2011_07_06, confidence High, signature_severity Informational, tag Description_Generated_By_Proofpoint_Nexus, updated_at 2020_08_11;
)