Checkpoint - Pending Phishing emails

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to Content Index


This query searches for phishing emails that are pending action

Attribute Value
Type Analytic Rule
Solution CheckPoint Harmony Email and Collaboration
ID a97e2333-b7de-4c14-9700-e652a1dbef26
Severity High
Kind Scheduled
Tactics InitialAccess
Techniques T1566
Required Connectors CheckpointHECConnection
Source View on GitHub

Tables Used

This content item queries data from the following tables:

Table Transformations Ingestion API Lake-Only
CheckpointHEC_CL ? ?

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to Analytic Rules · Back to CheckPoint Harmony Email and Collaboration