Meraki Denialof Service
Query
//Looking for denial of service
Cisco_Meraki_CL
| where (* contains "shutdown" or * contains "config-register 0x2100" or * contains "config-register 0x2142")Explanation
This query is searching for any events in the Cisco Meraki logs that contain specific keywords related to denial of service attacks. These keywords include "shutdown", "config-register 0x2100", and "config-register 0x2142".
Details
Rod Trent
Released: November 4, 2020
Tables
Cisco_Meraki_CL
Keywords
DenialService
Operators
wherecontainsor