Supplemental Direction ED 25-03: Core Dump and Hunt Instructions
In effectCISA · CISA guidance · September 25, 2025
Summary
Binding instructions under Emergency Directive 25-03 that tell agencies how to capture memory files from Cisco firewall devices, send them to CISA, and hunt for signs of compromise.
What FedXchange has recorded
No changes recorded. The watch records a new document and any change in its status.
- Issuer
- Cybersecurity and Infrastructure Security Agency (CISA)
- Type
- CISA guidance
- Issued
- September 25, 2025
- Status
- In effect
Still in force, possibly with amendments.
Get new governance by email
A weekly email on Fridays, an alert on the day the watch finds something new, or both. Free.