Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Data Exfiltration

How can i detect low and slow data exfiltration with the Cisco IPS?                 

Everyone's tags (3)
2 REPLIES
New Member

Data Exfiltration

This is a valid question.  Let's get some discussion going here.

Bob, you wouldn't happen to be talking about 3.H.1. would you?

New Member

Re: Data Exfiltration

Yes I am talking about 3.H.1 also looking at 3.H.1.B I was going to create a custom Signatures that looks for ZIP and RAR files for the compressed files.

486
Views
0
Helpful
2
Replies