Dataverse - Login by a sensitive privileged user

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Content Index


Identifies Dataverse and Dynamics 365 logons by sensitive users.

Attribute Value
Type Analytic Rule
Solution Microsoft Business Applications
ID f327816b-9328-4b17-9290-a02adc2f4928
Severity High
Status Available
Kind Scheduled
Tactics InitialAccess, CredentialAccess, PrivilegeEscalation
Techniques T1133, T1190, T1078, T1212
Required Connectors Dataverse
Source View on GitHub

Tables Used

This content item queries data from the following tables:

Table Transformations Ingestion API Lake-Only
DataverseActivity ?

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Analytic Rules · Back to Microsoft Business Applications