Sagan medium stable other

[Barracuda] Incident Response Continuous Remediation Enabled Detected

[Barracuda] Incident Response Continuous Remediation Enabled Detected

View Source

Detection Logic

alert any $HOME_NET any -> $HOME_NET any (msg:"[Barracuda] Incident Response Continuous Remediation Enabled Detected"; program:Forensics; content:"
| 22
| category
| 22 3a 22
| Continuous Remediation Enabled
| 22
| "; parse_src_ip:1; reference:url,https://campus.barracuda.com/product/forensics/doc/167841332/reviewing-insights/; classtype:suspicious-activity; sid:5015586; rev:1;)

Field Validations

Loading…

Comments (0)

Loading comments...