From ad1a6a2bd37cbeb238dea839df044a409edc8274 Mon Sep 17 00:00:00 2001 From: Austin Clark Date: Fri, 15 Nov 2019 19:32:53 +0100 Subject: [PATCH] Update cisco_cli_net_sniff.yml --- rules/net_device/aaa/cisco_cli_net_sniff.yml | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/rules/net_device/aaa/cisco_cli_net_sniff.yml b/rules/net_device/aaa/cisco_cli_net_sniff.yml index 2f41a147e..3a329fce0 100644 --- a/rules/net_device/aaa/cisco_cli_net_sniff.yml +++ b/rules/net_device/aaa/cisco_cli_net_sniff.yml @@ -1,4 +1,5 @@ -title: Sniffing on a Network Device +title: Cisco Sniffing +id: b9e1f193-d236-4451-aaae-2f3d2102120d status: experimental description: Show when a monitor or a span/rspan is setup or modified references: @@ -23,4 +24,4 @@ detection: condition: keywords falsepositives: - Admins may setup new or modify old spans, or use a monitor for troubleshooting. -level: medium \ No newline at end of file +level: medium