Whisper Security - Newly Registered Domain on Threat ASN

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Content Index

---

Identifies newly registered domains (under 7 days old) hosted on autonomous systems with elevated threat scores. This combination often indicates adversary infrastructure staging for phishing, malware delivery, or C2 operations.

Attribute	Value
Type	Analytic Rule
Solution	Whisper
ID	4f80ee8e-901f-538a-8603-cc4b49e80164
Severity	High
Status	Available
Kind	Scheduled
Tactics	ResourceDevelopment
Techniques	T1583
Required Connectors	WhisperSecurityConnector
Source	View on GitHub

Tables Used

This content item queries data from the following tables:

Table	Transformations	Ingestion API	Lake-Only
WhisperASNReputation_CL	?	✓	?
WhisperInfraContext_CL	?	✓	?

---

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · Logic Apps · 📊

↑ Back to Analytic Rules · Back to Whisper