Browse Detection Rules | TDL Marketplace

sagan critical other

[FATPIPE] Login Success - ADMINISTRATOR

sagan critical other

[SNORT] Successful Administrator Privilege Gain

sagan critical other

[FATPIPE-AETAS] Login Success - ADMINISTRATOR - at supicious time

sagan critical other

[FATPIPE-BLUEDOT] Login Success - ADMINISTRATOR - from suspicious source

sagan critical other

[FATPIPE-GEOIP] Login Success - ADMINISTRATOR - from outside HOME_COUNTRY

sagan high other

[FATPIPE-CORRELATED] Login Success - ADMINISTRATOR - after exploit attempt

sagan high other

[FATPIPE-CORRELATED] Login Success - ADMINISTRATOR - after honeypot activity

sagan high other

[FATPIPE-CORRELATED] Login Success - ADMINISTRATOR - after recon activity

sagan informational other

[SONICWALL] Successful Administrator Login From External IP Address

sagan high other

[FATPIPE-CORRELATED] Login Success - ADMINISTRATOR - after brute force activity

sagan critical other

[FATPIPE] Login Success

sagan critical other

[FORTINET] Login accepted

sagan critical other

[FORTINET] Login accepted

sagan critical other

[FORTINET] Login accepted

sagan critical other

[RIVERBED] Administrator Login

sagan critical other

[FORTINET] Login from LCD

sagan critical other

[FORTINET] Login from LCD

sagan critical other

[PASSWORDSTATE] Security Administrator Added

sagan critical other

[PASSWORDSTATE] Security Administrator Removed

sagan critical other

[PASSWORDSTATE] Security Group Added

sagan critical other

[PASSWORDSTATE] Security Group Deleted

sagan critical other

[PASSWORDSTATE] Security Group Updated

sagan critical other

[PASSWORDSTATE] User Account Disabled

sagan critical other

[SYSLOG] Physical root login

sagan critical other

[PASSWORDSTATE] Privileged Account Credentials Deleted

Browse Rules