CybleVision Alerts Stealer Logs

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Content Index


Detects credential theft and information-stealer malware logs. Extracts stolen credentials, URLs, device info, IPs, domains, and metadata using the Alerts_StealerLogs parser.

Attribute Value
Type Analytic Rule
Solution Cyble Vision
ID e0bf55c2-35ef-47ab-8846-5087618ae805
Severity Low
Status Available
Kind Scheduled
Tactics CredentialAccess, Collection, Exfiltration, Reconnaissance, InitialAccess
Techniques T1555, T1005, T1041, T1589, T1189
Required Connectors CybleVisionAlerts
Source View on GitHub

Tables Used

This content item queries data from the following tables:

Table Transformations Ingestion API Lake-Only
CybleVisionAlerts_CL ? ?

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Analytic Rules · Back to Cyble Vision