cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1219
Views
0
Helpful
2
Replies

Data Exfiltration

bob.bartlett
Level 1
Level 1

How can i detect low and slow data exfiltration with the Cisco IPS?                 

2 Replies 2

chris.cumbaa
Level 1
Level 1

This is a valid question.  Let's get some discussion going here.

Bob, you wouldn't happen to be talking about 3.H.1. would you?

Yes I am talking about 3.H.1 also looking at 3.H.1.B I was going to create a custom Signatures that looks for ZIP and RAR files for the compressed files.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card