SSH GSSAPI-with-MIC Authentication Success

Ankit Mehta@Secvyn

•updated Jun 29, 2026•0•0•2

This rule detects successful SSH authentications using the GSSAPI-with-MIC mechanism. This can indicate legitimate user logins or, in some cases, an adversary using valid credentials to access a system via SSH.