Sagan informational stable other

[ONELOGIN] ONELOGIN_DESKTOP_LOGIN_FAILURE

[ONELOGIN] ONELOGIN_DESKTOP_LOGIN_FAILURE

View Source

Detection Logic

alert any $HOME_NET any -> $EXTERNAL_NET any (msg: "[ONELOGIN] ONELOGIN_DESKTOP_LOGIN_FAILURE"; json_content: ".event_type_id", "905"; parse_src_ip: 1; classtype: system-event; program: onelogin; sid:5006433; rev: 3;)

Field Validations

Loading…

Comments (0)

Loading comments...