CyberArkEPM - Attack attempt not blocked

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Content Index


This rule triggers on attack attempt which was not blocked by CyberArkEPM.

Attribute Value
Type Analytic Rule
Solution CyberArkEPM
ID 8e8978a2-9188-4187-8909-5ea00507bf16
Severity High
Kind Scheduled
Tactics Execution
Techniques T1204
Required Connectors CyberArkEPM
Source View on GitHub

Tables Used

This content item queries data from the following tables:

Table Transformations Ingestion API Lake-Only
CyberArkEPM_CL 🔶 ? ?

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Analytic Rules · Back to CyberArkEPM