Sagan informational stable other

[BOMGAR] Beyond Trust accounts_changed

[BOMGAR] Beyond Trust accounts_changed

View Source

Detection Logic

alert any $HOME_NET any -> $HOME_NET any (msg:"[BOMGAR] Beyond Trust accounts_changed"; program:bomgar; content:"event=accounts_changed"; classtype:system-event; reference:url,https://www.beyondtrust.com/docs/remote-support/how-to/integrations/syslog/events.htm; sid:5014697; rev:1; metadata:created_at 2024_07_01, updated_at 2024_07_01;)

Field Validations

Loading…

Comments (0)

Loading comments...