Infoblox - TI - Syslog Match Found - URL

Syslog URL match found in your Infoblox TIDE Threat Intelligence. Customize query count, scheduling, responses and more. Modify data sources, types and threat properties as desired.

Detection logic

Detection requirements

Platform: Containers IaaS Linux macOS Windows
The rule states no platform. This is derived from the 2 ATT&CK techniques it maps to.
Log source product: cefama syslog threatintelligence
Log source service: commonsecuritylog syslog threatintelligenceindicator

Detections can measure how the public catalogue is used — which detections people look for, and which pages bring them here. It sets a cookie that recognises this browser for 180 days. It is never linked to an account and never follows you to other sites. Privacy notice

Detection rules

Infoblox - TI - Syslog Match Found - URL

Detection logic

Detection requirements

MITRE ATT&CK mappings

From the source

Licence

Authorship

Detection rules