Query Details

Meraki Denialof Service

Query

//Looking for denial of service

Cisco_Meraki_CL
| where (* contains "shutdown" or * contains "config-register 0x2100" or * contains "config-register 0x2142")

Explanation

This query is searching for any events in the Cisco Meraki logs that contain specific keywords related to denial of service attacks. These keywords include "shutdown", "config-register 0x2100", and "config-register 0x2142".

Details

Rod Trent profile picture

Rod Trent

Released: November 4, 2020

Tables

Cisco_Meraki_CL

Keywords

Denial,Service

Operators

wherecontainsor

Actions