Skip to content

Commit f37ca5f

Browse files
committed
update message formatting
1 parent 4a1547b commit f37ca5f

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

detections/network/cisco_secure_firewall___blacklisted_ssl_certificate_fingerprint.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -51,7 +51,7 @@ drilldown_searches:
5151
earliest_offset: $info_min_time$
5252
latest_offset: $info_max_time$
5353
rba:
54-
message: Suspicious SSL certificate fingerprint ($SSL_CertFingerprint$) used in connections [ ListingReason: $Reasons$ ]
54+
message: Suspicious SSL certificate fingerprint - [$SSL_CertFingerprint$] used in connections [ListingReason - $Reasons$] from $src_ip$
5555
risk_objects:
5656
- field: src_ip
5757
type: system

0 commit comments

Comments
 (0)