Sigma low stable sigma

Cleartext Protocol Usage Via Netflow

Ensure that all account usernames and authentication credentials are transmitted across networks using encrypted channels Ensure that an encryption is used for all sensitive information in transit. Ensure that an encrypted channels is used for all administrative account access.

View Source

Detection Logic

{
  "selection": {
    "destination.port": [
      8080,
      21,
      80,
      23,
      50000,
      1521,
      27017,
      1433,
      11211,
      3306,
      15672,
      5900,
      5901,
      5902,
      5903,
      5904
    ]
  },
  "condition": "selection"
}

False Positives

⚠ Unknown

Field Validations

Loading…

Comments (0)

Loading comments...