Dataverse - Hierarchy security manipulation

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Content Index


Identifies suspicious behaviors in hierarchy security including: - Hierarchy security disabled. - User assigns themselves as a manager. - User assigns themselves to a monitored position.

Attribute Value
Type Analytic Rule
Solution Microsoft Business Applications
ID 2df0adf5-92a8-4ee0-a123-3eb5be1eed02
Severity Medium
Status Available
Kind Scheduled
Tactics PrivilegeEscalation
Techniques T1548, T1078
Required Connectors Dataverse
Source View on GitHub

Tables Used

This content item queries data from the following tables:

Table Transformations Ingestion API Lake-Only
DataverseActivity ?

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Analytic Rules · Back to Microsoft Business Applications