Synacktiv low experimental sigma

FortiManager SSH Web Console Connection

SSH web console connection request via WebSocket on FortiManager

View Source

Detection Logic

{
  "selection": {
    "message
| contains
| all": [
      "\"method\":\"console\"",
      "\"action\":\"connect\""
    ]
  },
  "condition": "selection"
}

Field Validations

Loading…

Comments (0)

Loading comments...