Pattern Accepted Public Key Or Password

Classification

Rule Name	Rule Type	Common Event	Classification
Pattern Accepted Public Key Or Password	Base Rule	General Information	Information
Accepted Public Key	Sub Rule	Accepted Public Key	Network Traffic
Accepted Password	Sub Rule	Authentication Activity	Authentication Success

Mapping with LogRhythm Schema  

Device Key in Log Message	LogRhythm Schema	Data Type
N/A	<sip>	IP Address
N/A	<sport>	Number
N/A	<vmid>	Text\String
N/A	<login>	Text\String

×