Barracuda Load Balancer Administrative Command Executed

Siddhant Mishra@Siddhant

•updated 6 days ago•1•0•2

Detects commands executed on a Barracuda load balancer. Network appliances sit outside most endpoint monitoring, so their own audit trail is frequently the only record that anyone logged in and did something. Onboarding: BARRACUDA-LOADBALANCER is ingested via Syslog (CEF) (Bloo extractor 859). Integration guide: https://bloo.io/docs/hypercloud/syslog-connector BQL (Bloo Query Language): stream=auditd where sourcename='BARRACUDA-LOADBALANCER' and action='SESSION_ENDED' | groupby user, process, commandline