OracleDBAudit - Inactive Users

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Content Index


Query for searching user accounts which last activity was more than 30 days ago.

Attribute Value
Type Hunting Query
Solution OracleDatabaseAudit
ID 2c7bbbe1-17cb-44ec-be63-fbb37b609403
Tactics InitialAccess
Techniques T1078
Required Connectors SyslogAma
Source View on GitHub

Tables Used

This content item queries data from the following tables:

Table Selection Criteria Transformations Ingestion API Lake-Only
Syslog SyslogMessage contains "Oracle Unified Audit" ?

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Hunting Queries · Back to OracleDatabaseAudit