Synacktiv low experimental sigma

FortiManager Multiple Uploads

Multiple uploads to FortiManager in close temporality

View Source

Detection Logic

{
  "type": "event_count",
  "rules": [
    "f182e2dc-3557-4cec-ac89-c437ec79b2a6"
  ],
  "timespan": "30s",
  "condition": {
    "gte": 3
  }
}

Field Validations

Loading…

Comments (0)

Loading comments...