Cisco Logging Disabled
This rule detects attempts to disable logging on Cisco devices by looking for specific commands such as 'no logging' or 'no aaa new-model'. Adversaries may disable logging to evade detection and hinder forensic analysis.
Sigma
This rule detects attempts to disable logging on Cisco devices by looking for specific commands such as 'no logging' or 'no aaa new-model'. Adversaries may disable logging to evade detection and hinder forensic analysis.
Already have an account?