UniFi Site Manager: New Device Adopted

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to Content Index


Identifies when a new device is adopted into the UniFi network. While often legitimate, unexpected adoptions may indicate unauthorized hardware additions.

Attribute Value
Type Analytic Rule
Solution UniFi Site Manager (CCF)
ID e69be544-9476-35bb-2533-fa8c650dcd46
Severity Informational
Status Available
Kind Scheduled
Tactics InitialAccess, Persistence
Techniques T1200, T1133
Required Connectors UniFiSiteManagerConnectorDefinition
Source View on GitHub

Tables Used

This content item queries data from the following tables:

Table Transformations Ingestion API Lake-Only
Unifi_SiteManager_Devices_CL ? ?

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to Analytic Rules · Back to UniFi Site Manager (CCF)