Hi all, While performing the investigation on the meta tags, I came
across an interesting logs. The log was from an external IP address to
an internal IP address which is NATed with a public IP. As per the log a
connection is build to the port 1433 f...
Hi , I need assistance in creating the below rule using EPL. The alert
needs to be triggered if there are number of deny traffic followed by
permit from a particular source to particular destination. I have tried
the RSA live rule which is excessive ...
