Sagan informational stable other

[VEEAM] Encryption Password Deleted

[VEEAM] Encryption Password Deleted

View Source

Detection Logic

alert any $HOME_NET any -> $HOME_NET any (msg:"[VEEAM] Encryption Password Deleted"; program:veeam; content:"instanceId=31800"; classtype:system-event; reference:url,https://helpcenter.veeam.com/docs/backup/events/event_id_list.html?ver=120; sid:5015027; rev:1; metadata:created_at 2024_07_05, updated_at 2024_07_05;)

Field Validations

Loading…

Comments (0)

Loading comments...