valitydev/SigmaHQ
14
0
Fork 0
mirror of https://github.com/valitydev/SigmaHQ.git synced 2024-11-07 17:58:52 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Update cisco_cli_moving_data.yml

Browse Source
This commit is contained in:
Austin Clark 2019-11-15 19:31:41 +01:00 committed by GitHub
parent 93a40b3b97
commit 441a302623
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
rules/net_device/aaa/cisco_cli_moving_data.yml
View File

@ -1,4 +1,5 @@
title: Stage Data on device
title: Cisco Stage Data
id: 5e51acb2-bcbe-435b-99c6-0e3cd5e2aa59
status: experimental
description: Various protocols maybe used to put data on the device for exfil or infil
references:
@ -35,4 +36,4 @@ detection:
condition: keywords
falsepositives:
- Generally used to copy configs or IOS images.
level: low
level: low