BTP - Mass user deletion in a sub account

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Content Index


Identifies user account deletion activity where the amount of deleted users exceeds a predefined threshold.

Attribute Value
Type Analytic Rule
Solution SAP BTP
ID 6f1e58bd-cd95-4dfb-8883-94207f30929a
Severity Medium
Status Available
Kind Scheduled
Tactics Impact
Techniques T1531, T1485, T1489, T0813, T0826, T0827
Required Connectors SAPBTPAuditEvents
Source View on GitHub

Tables Used

This content item queries data from the following tables:

Table Transformations Ingestion API Lake-Only
SAPBTPAuditLog_CL ? ?

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Analytic Rules · Back to SAP BTP