Dataverse - Login from IP in the block list

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Content Index


Identifies Dataverse sign-in activity from IPv4 addresses which are on a predefined block list. Blocked network ranges are maintained in the NetworkAddresses watchlist template.

Attribute Value
Type Analytic Rule
Solution Microsoft Business Applications
ID 666fef96-1bb8-4abf-ad72-e5cb49561381
Severity High
Status Available
Kind Scheduled
Tactics InitialAccess
Techniques T1190, T1133, T1078
Required Connectors Dataverse
Source View on GitHub

Tables Used

This content item queries data from the following tables:

Table Transformations Ingestion API Lake-Only
DataverseActivity ?

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Analytic Rules · Back to Microsoft Business Applications