Sagan medium stable other

[FORESCOUT-COUNTERACT] Unknown Wireless Endpoint Detected

[FORESCOUT-COUNTERACT] Unknown Wireless Endpoint Detected

View Source

Detection Logic

alert any $HOME_NET any -> $HOME_NET any (msg:"[FORESCOUT-COUNTERACT] Unknown Wireless Endpoint Detected"; program:CounterACT; content:"Wireless endpoint as unknown"; content:!"denied access"; parse_src_ip:1; normalize; reference:url,https://docs.forescout.com/bundle/syslog-3-6-1-h/page/syslog-3-6-1-h.Syslog-Triggers.html; classtype:suspicious-activity; sid:5015924; rev:1; metadata:created_at 2024_01_20, updated_at 2024_01_20;)

Field Validations

Loading…

Comments (0)

Loading comments...