Cisco File Deletion

Last updated on:

About the rule

Rule Type

Standard

Rule Description

See what files are being deleted from flash file systems

Severity

Trouble

Rule Requirement

Criteria

Action1: actionname = "DETECTION_ACTION_CISCO_FILE_DELETION" select Action1.HOSTNAME,Action1.TYPESOURCE,Action1.TYPEFACILITY,Action1.INTERFACE,Action1.COMMANDEXECUTED,Action1.USERNAME,Action1.MESSAGE

Detection

Execution Mode

realtime

Log Sources

Cisco

Author

Austin Clark