Barracuda Load Balancer Administrative Login

Siddhant Mishra@Siddhant

•updated yesterday•0•0•0

Detects authentication to the Barracuda load balancer management interface. Appliance management accounts are often shared, rarely rotated and seldom covered by the identity controls applied elsewhere, which makes them a durable route back in. Onboarding: BARRACUDA-LOADBALANCER is ingested via Syslog (CEF) (Bloo extractor 859). Integration guide: https://bloo.io/docs/hypercloud/syslog-connector BQL (Bloo Query Language): stream=authentication where sourcename='BARRACUDA-LOADBALANCER' and action='LOGIN' | groupby user, srcip, authproto