Cisco Modify Configuration — Detection Rule

Modifications to a config that will serve an adversary's impacts or persistence

Read the full analysis on IntelFusions