Theom - Financial data unencrypted

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Content Index


Creates Sentinel incidents for critical/high Theom risks, associated with ruleId TRIS0003 (Financial data has been observed in unencrypted data stores. Encrypt data at rest to comply with this CIS requirement)

Attribute Value
Type Analytic Rule
Solution Theom
ID b568d2fb-b73c-4e6a-88db-2093457712af
Severity High
Status Available
Kind Scheduled
Tactics Collection
Techniques T1213, T1530
Required Connectors Theom
Source View on GitHub

Tables Used

This content item queries data from the following tables:

Table Transformations Ingestion API Lake-Only
TheomAlerts_CL 🔶 ? ?

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Analytic Rules · Back to Theom