Whisper - ASN Reputation Score Hunt

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Content Index

---

Detects ASN reputation degradation by comparing scores across 24-hour windows, flagging increases greater than 20 points. Helps surface ASNs that became significantly more risky in recent telemetry.

Attribute	Value
Type	Hunting Query
Solution	Whisper
ID	c63683cc-3a89-5a3f-93a2-548e3807f18f
Tactics	Collection, CredentialAccess
Techniques	T1557
Required Connectors	WhisperSecurityConnector
Source	View on GitHub

Tables Used

This content item queries data from the following tables:

Table	Transformations	Ingestion API	Lake-Only
WhisperASNReputation_CL	?	✓	?

---

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Hunting Queries · Back to Whisper