Ransomware Attack Detected

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Content Index


Identifies ransomware attacks detected by the Ransomware Protection service running on a Nasuni Edge Appliance.

Attribute Value
Type Analytic Rule
Solution Nasuni
ID 6c8770fb-c854-403e-a64d-0293ba344d5f
Severity High
Status Available
Kind Scheduled
Tactics Impact
Techniques T1486
Required Connectors SyslogAma
Source View on GitHub

Tables Used

This content item queries data from the following tables:

Table Selection Criteria Transformations Ingestion API Lake-Only
Syslog SyslogMessage has "The Filer has detected a new ransomware attack" ?

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Analytic Rules · Back to Nasuni