Cisco FMC Management Interface Unauthorized External Access Attempt
Detects login or authentication attempts to a Cisco Firewall Management Center (FMC) management interface from non-authorized source IP addresses. The rule specifically flags connections targeting potential low-privilege or service accounts that may indicate unauthorized access attempts or brute-force behavior directed at critical network infrastructure.
Microsoft Sentinel (KQL)
