Guacamole Two Users Sharing Session Anomaly

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•0•22

This rule detects an anomaly in Apache Guacamole sessions where two users are simultaneously present in the same session. This could indicate unauthorized access, session hijacking, or a shared credential scenario that deviates from normal behavior.