NordPass - Activity token revocation

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Content Index


This will alert you when the event reporting token is revoked, posing the risk of active integration being blocked.

Attribute Value
Type Analytic Rule
Solution NordPass
ID 800314a6-759a-4575-93e2-1e080b1d33f9
Severity Medium
Kind Scheduled
Tactics DefenseEvasion
Techniques T1134
Required Connectors NordPass
Source View on GitHub

Tables Used

This content item queries data from the following tables:

Table Transformations Ingestion API Lake-Only
NordPassEventLogs_CL ? ?

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Analytic Rules · Back to NordPass