Synacktiv informational experimental sigma

FortiManager WebSocket Connection

A WebSocket connection successfully opened on FortiManager

View Source

Detection Logic

{
  "selection": {
    "cs-method": "GET",
    "cs-uri-stem
| startswith": "/ws3",
    "sc-status": 101
  },
  "condition": "selection"
}

Field Validations

Loading…

Comments (0)

Loading comments...