Detection Logic
alert any $HOME_NET any -> $EXTERNAL_NET any (msg: "[ONELOGIN] SANDBOX_DELETED"; json_content: ".event_type_id", "1503"; parse_src_ip: 1; classtype: system-event; program: onelogin; sid:5006481; rev: 3;)Field Validations
Loading…
Comments (0)
Loading comments...