Sagan informational stable other

[VEEAM] Credential Record Deleted

[VEEAM] Credential Record Deleted

View Source

Detection Logic

alert any $HOME_NET any -> $HOME_NET any (msg:"[VEEAM] Credential Record Deleted"; program:veeam; content:"instanceId=25500"; classtype:system-event; reference:url,https://helpcenter.veeam.com/docs/backup/events/event_id_list.html?ver=120; sid:5014982; rev:1; metadata:created_at 2024_07_05, updated_at 2024_07_05;)

Field Validations

Loading…

Comments (0)

Loading comments...