Samsung Knox - Mobile Device Boot Compromise Events

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Content Index


When a Knox device boot binary is at risk of compromise.

Attribute Value
Type Analytic Rule
Solution Samsung Knox Asset Intelligence
ID fae7e371-aee8-4d3f-8311-2255a45a30b3
Severity High
Status Available
Kind NRT
Tactics Persistence
Techniques T1645
Required Connectors SamsungDCDefinition
Source View on GitHub

Tables Used

This content item queries data from the following tables:

Table Transformations Ingestion API Lake-Only
Samsung_Knox_System_CL ? ?

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Analytic Rules · Back to Samsung Knox Asset Intelligence