Cyble Vision Alerts Cyble Web Applications

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

↑ Back to Content Index

---

Creates an incident for each discovered or exposed web application detected by Cyble Intelligence. Useful for SOC teams to investigate externally facing login portals, misconfigurations, and exposed infrastructure.

Attribute	Value
Type	Analytic Rule
Solution	Cyble Vision
ID	359ddb25-eab1-4ef5-8303-ed3a9b680690
Severity	Low
Status	Available
Kind	Scheduled
Tactics	Reconnaissance
Techniques	T1595, T1592
Required Connectors	CybleVisionAlerts
Source	View on GitHub

Tables Used

This content item queries data from the following tables:

Table	Transformations	Ingestion API	Lake-Only
CybleVisionAlerts_CL	?	✓	?

---

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

↑ Back to Analytic Rules · Back to Cyble Vision