Update cisco_cli_net_sniff.yml
This commit is contained in:
@@ -1,4 +1,5 @@
|
||||
title: Sniffing on a Network Device
|
||||
title: Cisco Sniffing
|
||||
id: b9e1f193-d236-4451-aaae-2f3d2102120d
|
||||
status: experimental
|
||||
description: Show when a monitor or a span/rspan is setup or modified
|
||||
references:
|
||||
@@ -23,4 +24,4 @@ detection:
|
||||
condition: keywords
|
||||
falsepositives:
|
||||
- Admins may setup new or modify old spans, or use a monitor for troubleshooting.
|
||||
level: medium
|
||||
level: medium
|
||||
|
||||
Reference in New Issue
Block a user