Synacktiv informational experimental sigma

FortiManager Logout

User logout from FortiManager

View Source

Detection Logic

{
  "selection": {
    "cs-method": "GET",
    "cs-uri-stem
| startswith": "/p/logout",
    "cs-uri-query
| contains": "host=",
    "sc-status": 200
  },
  "condition": "selection"
}

Field Validations

Loading…

Comments (0)

Loading comments...