admin/splunk-security_content
1
0
Fork 0
mirror of https://github.com/splunk/security_content synced 2026-06-08 17:32:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update cisco_secure_firewall___citrix_netscaler_memory_overread_attempt.yml

Browse Source
This commit is contained in:
Nasreddine Bencherchali
2025-07-17 20:46:33 +02:00
parent 523e5f4b94
commit 799faa2a1e
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
detections/network/cisco_secure_firewall___citrix_netscaler_memory_overread_attempt.yml
+2 -2
View File
@@ -32,7 +32,7 @@ search: |
by dest_ip
| `security_content_ctime(firstTime)`
| `security_content_ctime(lastTime)`
| `cisco_secure_firewall___citrix_netscaler_memory_overread_attempt`
| `cisco_secure_firewall___citrix_netscaler_memory_overread_attempt_filter`
how_to_implement: |
This search requires Cisco Secure Firewall Threat Defense Logs, which
includes the FileEvent EventType. This search uses an input macro named `cisco_secure_firewall`.
@@ -74,7 +74,7 @@ rba:
tags:
analytic_story:
- Cisco Secure Firewall Threat Defense Analytics
- CVE-2025-5777
- Citrix NetScaler ADC and NetScaler Gateway CVE-2025-5777
asset_type: Endpoint
mitre_attack_id:
- T1203