Cisco Disabling Logging

 Original Source: [Sigma source]
Title: Cisco Disabling Logging
Status: test
Description:Turn off logging locally or remote
References:
  -https://www.cisco.com/en/US/docs/ios/security/command/reference/sec_a2.pdf
Author: Austin Clark
Date: 2019-08-11
modified:2023-01-04
Tags:
  • -'attack.defense-impairment'
  • -'attack.t1685'
Logsource:
  • product: cisco
  • service: aaa
Detection:
  keywords:
    - 'no logging'
    - 'no aaa new-model'
  condition:keywords
Falsepositives:
  -Unknown
Level: high