Signature Detail

APP: Arkeia Network Backup Agent Config Query

This signature detects attempts to obtain the configuration from an Arkeia Network Backup Agent, which contains recently discovered vulnerabilities. The Agent's default configuration enables unauthorized access to files on a host. Note: This signature detects all connections to the Agent. If you are using this product on your network and this signature detects a connection, it might not indicate malicious activity. We recommend not using this signature when monitoring internal network traffic to avoid false positives.

Extended Description

If an attacker successfully enumerates vulnerable Arkeia backup hosts, sensitive configuration details may be disclosed. This information may be leveraged to facilitate further penetration into the targeted network.