Cyble Vision Alerts Hacktivism

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Content Index


Detects hacktivist activity (Telegram posts, defacements, site takedowns, etc.) using the Alerts_Hacktivism parser. Extracts post content, attacker/team,domains, links, IPs, media and metadata for triage.

Attribute Value
Type Analytic Rule
Solution Cyble Vision
ID 6649e5a0-0365-452f-84b3-448a0aec7a59
Severity Low
Status Available
Kind Scheduled
Tactics Reconnaissance, Impact, ResourceDevelopment
Techniques T1595, T1491, T1498, T1585
Required Connectors CybleVisionAlerts
Source View on GitHub

Tables Used

This content item queries data from the following tables:

Table Transformations Ingestion API Lake-Only
CybleVisionAlerts_CL ? ?

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Analytic Rules · Back to Cyble Vision