Missing Domain Controller Heartbeat

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Content Index


This detection will go over the heartbeats received from the agents of Domain Controllers over the last hour, and will create alerts if the last heartbeats were received an hour ago.

Attribute Value
Type Analytic Rule
Solution Standalone Content
ID b8b8ba09-1e89-45a1-8bd7-691cd23bfa32
Severity High
Kind Scheduled
Tactics Impact, DefenseEvasion
Techniques T1499, T1564
Source View on GitHub

Tables Used

This content item queries data from the following tables:

Table Transformations Ingestion API Lake-Only
Heartbeat ? ?

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Analytic Rules