Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊
This rule will check if there is an unnormal activity of sites that are deleted or changed per user. The normal amount of actions is calculated based on the previous 14 days of activity. If there is a significant increase, an incident will be created.
| Attribute | Value |
|---|---|
| Type | Analytic Rule |
| Solution | Lastpass Enterprise Activity Monitoring |
| ID | a3bbdf60-0a6d-4cc2-b1d1-dd70aca184ce |
| Severity | Low |
| Status | Available |
| Kind | Scheduled |
| Tactics | Impact |
| Techniques | T1485 |
| Required Connectors | LastPass |
| Source | View on GitHub |
This content item queries data from the following tables:
| Table | Transformations | Ingestion API | Lake-Only |
|---|---|---|---|
LastPassNativePoller_CL 🔶 |
? | ✓ | ? |
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊
↑ Back to Analytic Rules · Back to Lastpass Enterprise Activity Monitoring