Hi, I was working on the use case of Cisco ISE anomalous behaviour particularly on MAC spoofing for my SIEM. I've come across this https://clnv.s3.amazonaws.com/2018/usa/pdf/BRKSEC-3697-Reference.pdfAnd it seems that the message codes for MAC spoofin...