Meraki PKI Activity
Query
//Looking for private key transaction or distribution of new certificates
Cisco_Meraki_CL
| where (* contains "crypto pki export" or * contains "crypto pki import" or * contains "crypto pki trustpoint")Explanation
This query is searching for any transactions involving private keys or the distribution of new certificates in the Cisco Meraki logs. It filters the logs to include only entries that contain the phrases "crypto pki export", "crypto pki import", or "crypto pki trustpoint".
Details
Rod Trent
Released: November 4, 2020
Tables
Cisco_Meraki_CL
Keywords
PrivateKeyTransactionDistributionCertificates
Operators
wherecontainsor