Sigma low test sigma

Cisco Collect Data

Collect pertinent data from the configuration files

View Source

Detection Logic

{
  "keywords": [
    "show running-config",
    "show startup-config",
    "show archive config",
    "more"
  ],
  "condition": "keywords"
}

False Positives

  • ⚠ Commonly run by administrators

Field Validations

Loading…

Comments (0)

Loading comments...