Product
medium
advisory
Fortigate SSL VPN Login Followed by SIEM Alert
2 rulesDetection of initial access via Fortigate SSL VPN login, followed by a SIEM alert, indicating potential malicious activity post-VPN access.
Fortigate SSL VPN
fortigate
sslvpn
initial-access
siem
2r
medium
advisory
FortiGate SSL VPN Login Followed by SIEM Alert
2 rules 1 TTPDetects FortiGate SSL VPN logins followed by a SIEM detection alert for the same user within a short timeframe, potentially indicating VPN abuse, credential compromise, or initial access followed by post-compromise activity.
FortiGate SSL VPN
fortinet
vpn
initial-access
credential-access
2r
1t