solarwinds ips logs query

kb1 — Fri, 18 Dec 2020 00:39:25 GMT

So is it possible to see the Mitre attack techniques on the ips logs seen here in this link posted on the official department of homeland security website?

https://attack.mitre.org/tactics/TA0003/

if i filter by ips logs with the ip of the solarwinds server will i see anything related to those mitre attacks? assuming those attacks happen (i have looked at ips logs for last 3 months and i do not see anything out of the ordinary).

Thank you.

Re: solarwinds ips logs query

PhoneBoy — Fri, 18 Dec 2020 01:43:34 GMT

We actually see it on other blades as well.
Please check the following SK: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk171000

topic solarwinds ips logs query in General Topics

solarwinds ips logs query

Re: solarwinds ips logs query