Power Platform - Connector added to a sensitive environment

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Content Index


Identifies occurrences of new API connector creations within Power Platform, specifically targeting a predefined list of sensitive environments.

Attribute Value
Type Analytic Rule
Solution Microsoft Business Applications
ID 886a5655-3d12-42f1-8927-4095789c575e
Severity Low
Status Available
Kind Scheduled
Tactics Execution, Exfiltration
Techniques T0871, T1567, T1537
Required Connectors PowerPlatformAdmin
Source View on GitHub

Tables Used

This content item queries data from the following tables:

Table Transformations Ingestion API Lake-Only
PowerPlatformAdminActivity ?

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Analytic Rules · Back to Microsoft Business Applications