Skip to content
Threat Feed
Subscribe

Tag

Attack.t1136.001

1 brief RSS
medium advisory

FortiGate - New Administrator Account Created

This brief describes how to detect the creation of new administrator accounts on Fortinet FortiGate firewalls, a behavior often used by attackers for persistence (ATT&CK T1136.001) or to maintain unauthorized access after initial compromise.

FortiGate Firewall attack.persistence attack.t1136.001 network-device fortinet
1r 1t