Trust Monitor Event

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Content Index


This query identifies when a new trust monitor event is detected.

Attribute Value
Type Analytic Rule
Solution Standalone Content
ID 8dcf7238-a7d0-4cfd-8d0c-b230e3cd9182
Severity Medium
Kind Scheduled
Tactics CredentialAccess
Techniques T1528, T1555
Source View on GitHub

Tables Used

This content item queries data from the following tables:

Table Transformations Ingestion API Lake-Only
DuoSecurityTrustMonitor_CL 🔶 ? ?

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Analytic Rules