Cisco SE - Policy update failure

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to Content Index


Detects policy updates failures.

Attribute Value
Type Analytic Rule
Solution Cisco Secure Endpoint
ID 64fece0a-44db-4bab-844d-fd503dc0aaba
Severity Medium
Status Available
Kind Scheduled
Tactics DefenseEvasion
Techniques T1562
Required Connectors CiscoSecureEndpoint
Source View on GitHub

Tables Used

This content item queries data from the following tables:

Table Transformations Ingestion API Lake-Only
CiscoSecureEndpointAuditLogsV2_CL
CiscoSecureEndpointEventsV2_CL
CiscoSecureEndpoint_CL 🔶 ? ?

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to Analytic Rules · Back to Cisco Secure Endpoint