Pathlock TDnR - CUA Settings Changes

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to Content Index


Detects changes to SAP Central User Administration (CUA) settings, forwarded by Pathlock Threat Detection and Response. Unauthorized CUA modifications may affect centralized user management across connected SAP systems and could be used to establish persistent access.

Attribute Value
Type Analytic Rule
Solution Pathlock_TDnR
ID 2a3b4c5d-6e7f-4a0b-8c1d-2e3f4a5b6c17
Severity Medium
Status Available
Kind Scheduled
Tactics Persistence
Techniques T1098
Required Connectors Pathlock_TDnR
Source View on GitHub

Tables Used

This content item queries data from the following tables:

Table Transformations Ingestion API Lake-Only
Pathlock_TDnR_CL ? ?

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to Analytic Rules · Back to Pathlock_TDnR