FortiGate - New Firewall Policy Added

SigmaHQ Detections@sigmaHQ

•updated Nov 1, 2025•0•55

Detects the addition of a new firewall policy on a Fortinet FortiGate Firewall. This activity could indicate an adversary attempting to alter network access controls for defense evasion, persistence, or to facilitate further malicious activity.