Synacktiv low experimental sigma

FortiManager SSH Web Console Data Write

SSH web console data write via WebSocket on FortiManager

View Source

Detection Logic

{
  "selection": {
    "message
| contains
| all": [
      "\"method\":\"console\"",
      "\"action\":\"xmit\""
    ]
  },
  "condition": "selection"
}

Field Validations

Loading…

Comments (0)

Loading comments...