Suspicious link sharing pattern

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Content Index


Alerts in links that have been shared across multiple Zoom chat channels by the same user in a short space if time. Adjust the threshold figure to change the number of channels a message needs to be posted in before an alert is raised.

Attribute Value
Type Analytic Rule
Solution Standalone Content
ID 1218175f-c534-421c-8070-5dcaabf28067
Severity Low
Kind Scheduled
Tactics Reconnaissance
Techniques T1598
Source View on GitHub

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Analytic Rules