BTP - User added to sensitive privileged role collection

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

↑ Back to Content Index

---

Identifies identity management actions whereby a user is added to a set of monitored privileged role collections.

Attribute	Value
Type	Analytic Rule
Solution	SAP BTP
ID	5acbe4cb-a379-4acc-9ad3-28dc48ad33d3
Severity	Low
Status	Available
Kind	Scheduled
Tactics	LateralMovement, PrivilegeEscalation
Techniques	T0859, T1078
Required Connectors	SAPBTPAuditEvents
Source	View on GitHub

Tables Used

This content item queries data from the following tables:

Table	Transformations	Ingestion API	Lake-Only
SAPBTPAuditLog_CL	?	✓	?

---

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

↑ Back to Analytic Rules · Back to SAP BTP