New service account gained access to IaaS resource

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Content Index


This policy detects when an application or service account gained new access to your assets. This policy is defined by Authomize and can be edited to change the configuration.

Attribute Value
Type Analytic Rule
Solution Authomize
ID 6c17f270-cd56-48cc-9196-1728ffea6538
Severity Informational
Status Available
Kind Scheduled
Tactics InitialAccess
Techniques T1078
Required Connectors Authomize
Source View on GitHub

Tables Used

This content item queries data from the following tables:

Table Transformations Ingestion API Lake-Only
Authomize_v2_CL 🔶 ? ?

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Analytic Rules · Back to Authomize