CYFIRMA - Attack Surface - Domain/IP Vulnerability Exposure High Rule

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

This rule is triggered when CYFIRMA identifies publicly exposed vulnerabilities on domains or IP addresses within your organization's attack surface. These vulnerabilities may include outdated software, missing patches, insecure services, or misconfigurations that can be exploited by threat actors.Such exposure significantly increases the risk of exploitation, lateral movement, or data breach. Immediate investigation and remediation are recommended.

Attribute	Value
Type	Analytic Rule
Solution	Cyfirma Attack Surface
ID	`fbe4f5e0-d93e-4c93-8cf9-925eb8ea7f2e`
Severity	High
Status	Available
Kind	Scheduled
Tactics	InitialAccess, Discovery, DefenseEvasion, Persistence, Execution, Impact, PrivilegeEscalation
Techniques	T1505, T1068, T1046, T1499
Required Connectors	CyfirmaAttackSurfaceAlertsConnector
Source	View on GitHub

Tables Used

This content item queries data from the following tables:

Table	Transformations	Ingestion API	Lake-Only
`CyfirmaASDomainIPVulnerabilityAlerts_CL`	?	✓	?

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

↑ Back to Analytic Rules · Back to Cyfirma Attack Surface