Tag
medium
advisory
Cisco ASA Device File Copy Activity
2 rules 2 TTPsAdversaries may copy device files, including configurations and packet captures, from Cisco ASA devices via CLI or ASDM for reconnaissance, credential extraction, or data exfiltration, which can be detected via command execution logs.
Cisco ASA +1
cisco
asa
file_copy
reconnaissance
credential_access
exfiltration
2r
2t
medium
advisory
Cisco ASA Logging Filters Configuration Tampering
2 rules 1 TTPTampering with logging filter configurations on Cisco ASA devices can allow attackers to evade detection by reducing logging levels or disabling specific log categories.
ASA +3
cisco
logging
evasion
2r
1t
high
advisory
Cisco ASA Logging Disabled via CLI
2 rulesDetection of disabled logging functionality on a Cisco ASA device via CLI commands, indicating potential defense evasion by adversaries.
Adaptive Security Appliance
defense-evasion
cisco
asa
2r