valitydev/SigmaHQ
14
0
Fork 0
mirror of https://github.com/valitydev/SigmaHQ.git synced 2024-11-07 17:58:52 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Update cisco_cli_local_accounts.yml

Browse Source
This commit is contained in:
Austin Clark 2019-11-15 19:30:33 +01:00 committed by GitHub
parent ed85f1e612
commit 9cd6670501
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
rules/net_device/aaa/cisco_cli_local_accounts.yml
View File

@ -1,4 +1,5 @@
title: Local Accounts
title: Cisco Local Accounts
id: 6d844f0f-1c18-41af-8f19-33e7654edfc3
status: experimental
description: Find local accounts being created or modified as well as remote authentication configurations
references:
@ -23,4 +24,4 @@ detection:
condition: keywords
falsepositives:
- When remote authentication is in place, this should not change often.
level: high
level: high