CyberArkEPM - Uncommon process Internet access

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

↑ Back to Content Index

---

Detects access to the Internet by uncommon processes.

Attribute	Value
Type	Analytic Rule
Solution	CyberArkEPM
ID	9d0d44ab-54dc-472a-9931-53521e888932
Severity	High
Kind	Scheduled
Tactics	Execution, DefenseEvasion, CommandAndControl
Techniques	T1204, T1036, T1095
Required Connectors	CyberArkEPM
Source	View on GitHub

Tables Used

This content item queries data from the following tables:

Table	Transformations	Ingestion API	Lake-Only
CyberArkEPM_CL 🔶	?	✓	?

---

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

↑ Back to Analytic Rules · Back to CyberArkEPM