Sagan informational stable other

[DUO] user authentication failed due to unenrolled user

[DUO] user authentication failed due to unenrolled user

View Source

Detection Logic

alert any $HOME_NET any -> $HOME_NET any (msg:"[DUO] user authentication failed due to unenrolled user"; program:duo; parse_src_ip: 1; json_content:".eventtype","authentication"; json_content:".reason","deny_unenrolled_user"; classtype:system-event; reference:url,help.duo.com/s/article/1023?language=en_US; sid:5014003; rev:2;)

Field Validations

Loading…

Comments (0)

Loading comments...