CyberArkEPM - Multiple attack types

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Content Index


This rule triggers on multiple attack attemts triggered by same user.

Attribute Value
Type Analytic Rule
Solution CyberArkEPM
ID c02f96b4-057b-4e63-87af-6376ef7a081b
Severity High
Kind Scheduled
Tactics Execution
Techniques T1204
Required Connectors CyberArkEPM
Source View on GitHub

Tables Used

This content item queries data from the following tables:

Table Transformations Ingestion API Lake-Only
CyberArkEPM_CL 🔶 ? ?

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Analytic Rules · Back to CyberArkEPM