Sagan informational stable other

[BOMGAR] Beyond Trust account_group_changed

[BOMGAR] Beyond Trust account_group_changed

View Source

Detection Logic

alert any $HOME_NET any -> $HOME_NET any (msg:"[BOMGAR] Beyond Trust account_group_changed"; program:bomgar; content:"event=account_group_changed"; classtype:system-event; reference:url,https://www.beyondtrust.com/docs/remote-support/how-to/integrations/syslog/events.htm; sid:5014688; rev:1; metadata:created_at 2024_07_01, updated_at 2024_07_01;)

Field Validations

Loading…

Comments (0)

Loading comments...