Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊
New devices adopted into a UniFi site outside business hours (10pm - 6am local time, or weekends). Legitimate admin work usually happens in hours; unattended adoption can be unauthorised hardware joining the network.
| Attribute | Value |
|---|---|
| Type | Hunting Query |
| Solution | UniFi Site Manager (CCF) |
| ID | 77bba2d0-92e1-408d-9e43-2d6e5e81538e |
| Kind | HuntingQuery |
| Tactics | Persistence |
| Techniques | T1098 |
| Required Connectors | UniFiSiteManagerConnectorDefinition |
| Source | View on GitHub |
This content item queries data from the following tables:
| Table | Selection Criteria | Transformations | Ingestion API | Lake-Only |
|---|---|---|---|---|
Unifi_SiteManager_Devices_CL |
? | ✓ | ? |
Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊
↑ Back to Hunting Queries · Back to UniFi Site Manager (CCF)