Unauthorized remote access to the network (Microsoft Defender for IoT)

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Content Index


This alert leverages Defender for IoT to detect unauthorized remote access to network devices, if another device on the network is compromised, target devices can be accessed remotely, increasing the attack surface.

Attribute Value
Type Analytic Rule
Solution IoTOTThreatMonitoringwithDefenderforIoT
ID 1ff4fa3d-150b-4c87-b733-26c289af0d49
Severity Medium
Status Available
Kind Scheduled
Tactics InitialAccess
Techniques T0886
Required Connectors IoT
Source View on GitHub

Tables Used

This content item queries data from the following tables:

Table Transformations Ingestion API Lake-Only
SecurityAlert ?

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Analytic Rules · Back to IoTOTThreatMonitoringwithDefenderforIoT