Sagan unknown stable other
[RIVERBED] Administrator Login Failure
[RIVERBED] Administrator Login Failure
Detection Logic
alert any $EXTERNAL_NET any -> $HOME_NET any (msg:"[RIVERBED] Administrator Login Failure"; content: "password is not recognized"; parse_src_ip: 1; default_proto: tcp; default_dst_port: $HTTPS_PORT; classtype: unsuccessful-admin; program: webasd; sid: 5002031; rev:2;) Field Validations
Loading…
Comments (0)
Loading comments...