SpyCloud plaintext credential exposure detected

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Content Index


Identifies user accounts exposed with a plaintext password in a third-party data breach. Unremediated exposures of this kind can lead directly to account takeover.

Attribute Value
Type Analytic Rule
Solution SpyCloud Enterprise Protection CCF
ID a25eba0e-ff42-4c97-a379-d76bdb2aa1e3
Severity High
Kind scheduled
Tactics CredentialAccess
Techniques T1555
Required Connectors SpyCloudEnterpriseProtectionCCF
Source View on GitHub

Tables Used

This content item queries data from the following tables:

Table Transformations Ingestion API Lake-Only
SpyCloudBreachWatchlistV2_CL ? ✓ ?

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Analytic Rules · Back to SpyCloud Enterprise Protection CCF