API - Kiterunner detection

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Content Index

---

42Crunch API protection against Kiterunner enumeration

Attribute	Value
Type	Analytic Rule
Solution	42Crunch API Protection
ID	421b38ec-4295-4aed-8299-c92e268ad663
Severity	Medium
Status	Available
Kind	Scheduled
Tactics	Reconnaissance, Discovery
Techniques	T1595, T1580, T1083
Required Connectors	42CrunchAPIProtection, FortyTwoCrunchAPIProtection
Source	View on GitHub

Tables Used

This content item queries data from the following tables:

Table	Transformations	Ingestion API	Lake-Only
FortyTwoCrunchAPIProtectionV2_CL	?	✓	?
apifirewall_log_1_CL 🔶	?	✓	?

---

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Analytic Rules · Back to 42Crunch API Protection