Cyble Vision Alerts Vulnerability

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

↑ Back to Content Index

---

Detects SSL/TLS and application vulnerabilities from CybleVision. Extracts host, IP, port, severity, vulnerability ID and first-seen metadata using the Alerts_Vulnerability parser. Incidents grouped per service.

Attribute	Value
Type	Analytic Rule
Solution	Cyble Vision
ID	0e0cdda9-4536-4cc9-91cf-736e8957ed26
Severity	Low
Status	Available
Kind	Scheduled
Tactics	Reconnaissance, Execution, Discovery
Techniques	T1595, T1203, T1046
Required Connectors	CybleVisionAlerts
Source	View on GitHub

Tables Used

This content item queries data from the following tables:

Table	Transformations	Ingestion API	Lake-Only
CybleVisionAlerts_CL	?	✓	?

---

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

↑ Back to Analytic Rules · Back to Cyble Vision