Pulse Secure CVE-2019-11510 Exploitation Attempt

SigmaHQ Detections@sigmaHQ

•updated Aug 12, 2024•2•0•25

Detects exploitation attempts targeting Pulse Secure VPN appliances via CVE-2019-11510. Specifically, it looks for requests to a URI path containing '/dana/html5acc/guacamole/', which is indicative of an attacker attempting to access the Guacamole component of the Pulse Secure appliance.