Sagan informational stable other

[CISCO-MERAKI] [CRITICAL] Suspicious Activity Detected and Allowed

[CISCO-MERAKI] [CRITICAL] Suspicious Activity Detected and Allowed

View Source

Detection Logic

alert any $EXTERNAL_NET any -> $HOME_NET any (msg:"[CISCO-MERAKI] [CRITICAL] Suspicious Activity Detected and Allowed"; program:meraki_dashboard_api_data; content:"decision
| 3d
| allowed action
| 3d
| allow message"; nocase; classtype:system-event; sid:5016584; rev:1;)

Field Validations

Loading…

Comments (0)

Loading comments...