Update rules/network/initial_access_react_server_rce_network_alerts.toml

Samirbous · Mikaayenson · web-flow · commit 3fd2c9478caa · 2025-12-18T18:09:16.000Z
Co-authored-by: Mika Ayenson, PhD &lt;Mikaayenson@users.noreply.github.com&gt;
diff --git a/rules/network/initial_access_react_server_rce_network_alerts.toml b/rules/network/initial_access_react_server_rce_network_alerts.toml
@@ -66,6 +66,7 @@ tags = [
     "Data Source: PAN-OS",
     "Data Source: Fortinet",
     "Data Source: Suricata",
+    "Data Source: Cisco FTD",
     "Resources: Investigation Guide",
 ]
 timestamp_override = "event.ingested"

Original file line number	Diff line number	Diff line change
`@@ -66,6 +66,7 @@ tags = [`
`66`	`66`	`"Data Source: PAN-OS",`
`67`	`67`	`"Data Source: Fortinet",`
`68`	`68`	`"Data Source: Suricata",`
	`69`	`+ "Data Source: Cisco FTD",`
`69`	`70`	`"Resources: Investigation Guide",`
`70`	`71`	`]`
`71`	`72`	`timestamp_override = "event.ingested"`