Detection Logic
alert any $EXTERNAL_NET any -> $HOME_NET any (msg: "[FORTINET] Login from LCD"; content: "32001
| 22
| type="; content: "from LCD"; content:!"- - - -"; classtype: successful-admin; sid: 5000900; rev:2;)Field Validations
Loading…
Comments (0)
Loading comments...