Detect attempts to access cloud drives, web hards, etc. based on the Cloud Storage and NAS pattern group.
Overview
| Type | Stream |
|---|---|
| Referenced objects | Pattern group 클라우드 저장소 및 NAS59 |
Query
1| matchsig field=domain guid="b2c83838-2ac5-43a8-92d7-136f132e6d86" verify=f
2| eval result = strjoin("\n", foreach(valueof(_1, "rule"), _matchsig_result)) | fields - _matchsig_result