Versa Networks Threat Detected on Zero Trust Session
Detects a threat raised by Versa Networks on a zero trust session. Versa sits at the branch edge, so it observes traffic from sites that frequently have no local security stack at all — in many estates it is the only sensor between a remote office and the internet. Onboarding: VERSA-NETWORKS is ingested via Syslog (KV) (Bloo extractor 806). Integration guide: https://bloo.io/docs/hypercloud/syslog-connector BQL (Bloo Query Language): stream=threat where sourcename='VERSA-NETWORKS' and action='THREAT_DETECTED' | groupby user, srcip, dstip, threat, process
Sigma

