Detection: Access to Vulnerable Ivanti Connect Secure Bookmark Endpoint

Updated Date: 2024-05-14 ID: 15838756-f425-43fa-9d88-a7f88063e81a Author: Michael Haag, Splunk Type: TTP Product: Splunk Enterprise Security Description The following analytic identifies access to the /api/v1/configuration/users/user-roles/user-role/rest-userrole1/web/web-bookmarks/bookmark endpoin…