Ubiquiti - Possible connection to cryptominning pool

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Content Index


Detects connections which may indicate that device is infected with cryptominer.

Attribute Value
Type Analytic Rule
Solution Ubiquiti UniFi
ID 7feb3c32-2a11-4eb8-a2d7-e3792b31cb80
Severity Medium
Status Available
Kind Scheduled
Tactics CommandAndControl
Techniques T1071, T1095, T1571
Required Connectors CustomLogsAma
Source View on GitHub

Tables Used

This content item queries data from the following tables:

Table Transformations Ingestion API Lake-Only
Ubiquiti_CL ? ?

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Analytic Rules · Back to Ubiquiti UniFi