Detects unauthorized webmail access attempts based on the External Mail Service pattern group.
Overview
| Type | Stream |
|---|---|
| Referenced objects | Pattern group 외부 메일 서비스29 |
Query
1| matchsig field=domain guid="17e9daca-0d1e-4c5e-9636-13992199a411" verify=f
2| eval result = strjoin("\n", foreach(valueof(_1, "rule"), _matchsig_result)) | fields - _matchsig_result