Utimaco ESKM - New source IPs connecting to KMIP

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Content Index

---

Identifies new client IPs connecting to Utimaco ESKM in the last 24 hours that were not seen in the prior 14 days.

Attribute	Value
Type	Hunting Query
Solution	Utimaco Enterprise Secure Key Manager
ID	9b1a3b3e-7e16-4a3b-8a8f-7f1f2b1c0b02
Tactics	InitialAccess
Techniques	T1133
Required Connectors	UtimacoESKMConnector
Source	View on GitHub

Tables Used

This content item queries data from the following tables:

Table	Transformations	Ingestion API	Lake-Only
UtimacoESKMKmipServerLogs_CL	?	✓	?

---

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Hunting Queries · Back to Utimaco Enterprise Secure Key Manager