Query Details

Meraki Denialof Service

Query

//Looking for denial of service

Cisco_Meraki_CL
| where (* contains "shutdown" or * contains "config-register 0x2100" or * contains "config-register 0x2142")

Explanation

This query is searching for any events in the Cisco Meraki logs that contain specific keywords related to denial of service attacks. These keywords include "shutdown", "config-register 0x2100", and "config-register 0x2142".