API - Suspicious Login

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Content Index


42Crunch API protection against suspicious login

Attribute Value
Type Analytic Rule
Solution 42Crunch API Protection
ID 7bdc10d6-aa24-4ca9-9a93-802cd8761354
Severity High
Status Available
Kind Scheduled
Tactics CredentialAccess, InitialAccess
Techniques T1110, T1190
Required Connectors 42CrunchAPIProtection
Source View on GitHub

Tables Used

This content item queries data from the following tables:

Table Transformations Ingestion API Lake-Only
apifirewall_log_1_CL 🔶 ? ?

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Analytic Rules · Back to 42Crunch API Protection