Ping Federate - Abnormal password resets for user

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Content Index


Detects multiple password reset for user.

Attribute Value
Type Analytic Rule
Solution PingFederate
ID 6145efdc-4724-42a6-9756-5bd1ba33982e
Severity High
Status Available
Kind Scheduled
Tactics InitialAccess, Persistence, PrivilegeEscalation
Techniques T1078, T1098, T1134
Required Connectors CefAma
Source View on GitHub

Tables Used

This content item queries data from the following tables:

Table Selection Criteria Transformations Ingestion API Lake-Only
CommonSecurityLog DeviceProduct has "PingFederate" ?

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Analytic Rules · Back to PingFederate