Update web_cve_2021_22893_pulse_secure_rce_exploit.yml
This commit is contained in:
@@ -32,7 +32,7 @@ detection:
|
||||
- '200'
|
||||
condition: selection1 and selection2 | count(sc-status) by src_ip > 3
|
||||
timeframe: 30m
|
||||
---
|
||||
---
|
||||
logsource:
|
||||
product: PulseSecure
|
||||
detection:
|
||||
|
||||
Reference in New Issue
Block a user