Utimaco ESKM - After-hours KMIP activity

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to Content Index


Identify KMIP operations against Utimaco ESKM outside typical business hours, defaulting to 20:00-06:00 UTC and weekends.

Attribute Value
Type Hunting Query
Solution Utimaco Enterprise Secure Key Manager
ID 9b1a3b3e-7e16-4a3b-8a8f-7f1f2b1c0b04
Tactics DefenseEvasion
Techniques T1078
Required Connectors UtimacoESKMConnector
Source View on GitHub

Tables Used

This content item queries data from the following tables:

Table Transformations Ingestion API Lake-Only
UtimacoESKMKmipServerLogs_CL ? ?

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

Back to Hunting Queries · Back to Utimaco Enterprise Secure Key Manager