Juniper VPN evidence TQL queries

Prev Next

The following TQL query is for Juniper VPN evidence.

Identify VPN logins grouped by username and source IP address
class:juniper_vpn msg:login* | groupby [username,srcisp]