Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Load Balancer |
|
T1078 - Valid Accounts |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Kiteworks |
|
T1078 - Valid Accounts T1083 - File and Directory Discovery |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Adaxes |
|
T1078 - Valid Accounts |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Web Application Firewall |
|
T1078 - Valid Accounts T1083 - File and Directory Discovery T1110 - Brute Force |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
AWS CloudTrail |
|
T1078 - Valid Accounts |
|
AWS Redshift |
|
T1213 - Data from Information Repositories |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Anywhere365 |
|
T1078 - Valid Accounts |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Apache Guacamole |
|
T1078 - Valid Accounts |
|
Apache Subversion |
|
T1078 - Valid Accounts |
|
Cassandra |
|
T1213 - Data from Information Repositories |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
AssetView |
|
T1083 - File and Directory Discovery |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Atlassian BitBucket |
|
T1078 - Valid Accounts |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Auth0 |
|
T1078 - Valid Accounts |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Barracuda Firewall |
|
T1110 - Brute Force |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
BeyondTrust PowerBroker |
|
T1003 - OS Credential Dumping |
|
BeyondTrust Privilege Management |
|
T1003 - OS Credential Dumping |
|
BeyondTrust Privileged Identity |
|
T1078 - Valid Accounts |
|
BeyondTrust Secure Remote Access |
|
T1078 - Valid Accounts |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
GravityZone |
|
T1078 - Valid Accounts |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Bitglass CASB |
|
T1078 - Valid Accounts T1083 - File and Directory Discovery |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
BlackBerry Protect |
|
T1078 - Valid Accounts |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Box Cloud Content Management |
|
T1078 - Valid Accounts T1083 - File and Directory Discovery |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Bromium Secure Platform |
|
T1083 - File and Directory Discovery |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
CA Privileged Access Manager Server Control |
|
T1078 - Valid Accounts |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Cato Cloud |
|
T1110 - Brute Force |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Identity Awareness |
|
T1110 - Brute Force |
|
NGFW |
|
T1078 - Valid Accounts T1110 - Brute Force |
|
Security Gateway |
|
T1110 - Brute Force |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Cimtrak |
|
T1083 - File and Directory Discovery |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
ACS |
|
T1078 - Valid Accounts |
|
Adaptive Security Appliance |
|
T1003 - OS Credential Dumping T1110 - Brute Force |
|
AnyConnect |
|
T1110 - Brute Force |
|
Call Manager |
|
T1078 - Valid Accounts |
|
Cisco |
|
T1078 - Valid Accounts |
|
Duo Access Security |
|
T1078 - Valid Accounts |
|
Firepower |
|
T1110 - Brute Force |
|
ISE |
|
T1078 - Valid Accounts T1110 - Brute Force |
|
Meraki MX appliances |
|
T1110 - Brute Force |
|
NPE |
|
T1003 - OS Credential Dumping |
|
TACACS |
|
T1003 - OS Credential Dumping |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Citrix Endpoint Management |
|
T1078 - Valid Accounts |
|
Citrix Gateway ActiveSync Connector |
|
T1078 - Valid Accounts |
|
Citrix Netscaler |
|
T1003 - OS Credential Dumping T1078 - Valid Accounts T1110 - Brute Force |
|
Citrix Netscaler VPN |
|
T1110 - Brute Force |
|
Citrix ShareFile |
|
T1078 - Valid Accounts |
|
Citrix XenApp |
|
T1078 - Valid Accounts |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Clearsense |
|
T1078 - Valid Accounts |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Cloud Application |
|
T1078 - Valid Accounts |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Cloudflare Insights |
|
T1078 - Valid Accounts |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Code42 Incydr |
|
T1083 - File and Directory Discovery |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Falcon |
|
T1003 - OS Credential Dumping T1078 - Valid Accounts T1083 - File and Directory Discovery |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
CyberArk Vault |
|
T1078 - Valid Accounts T1083 - File and Directory Discovery |
|
Privileged Session Manager |
|
T1078 - Valid Accounts |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Darktrace |
|
T1078 - Valid Accounts |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Centrify Audit and Monitoring Service |
|
T1083 - File and Directory Discovery |
|
Centrify Infrastructure Services |
|
T1003 - OS Credential Dumping |
|
Centrify Zero Trust Privilege Services |
|
T1078 - Valid Accounts |
|
Secret Server |
|
T1078 - Valid Accounts |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
EMC Isilon |
|
T1083 - File and Directory Discovery |
|
One Identity Manager |
|
T1078 - Valid Accounts |
|
RSA Authentication Manager |
|
T1078 - Valid Accounts |
|
SonicWALL Aventail |
|
T1110 - Brute Force |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Digital Guardian Endpoint Protection |
|
T1003 - OS Credential Dumping T1078 - Valid Accounts T1083 - File and Directory Discovery |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Dropbox |
|
T1078 - Valid Accounts T1083 - File and Directory Discovery T1110 - Brute Force |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
DTEX InTERCEPT |
|
T1003 - OS Credential Dumping T1083 - File and Directory Discovery |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
EMP |
|
T1078 - Valid Accounts |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
ESET Endpoint Security |
|
T1078 - Valid Accounts |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
ESector DEFESA |
|
T1083 - File and Directory Discovery |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Egnyte |
|
T1078 - Valid Accounts T1083 - File and Directory Discovery |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Epic SIEM |
|
T1078 - Valid Accounts |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Exabeam Advanced Analytics |
|
T1078 - Valid Accounts |
|
Exabeam DL |
|
T1078 - Valid Accounts |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
F5 Advanced Web Application Firewall (WAF) |
|
T1003 - OS Credential Dumping |
|
F5 BIG-IP |
|
T1110 - Brute Force |
|
F5 BIG-IP Access Policy Manager (APM) |
|
T1110 - Brute Force |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
FTP |
|
T1078 - Valid Accounts T1083 - File and Directory Discovery |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Fast Enterprises GenTax |
|
T1078 - Valid Accounts |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
FileAuditor |
|
T1083 - File and Directory Discovery |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
FireEye Endpoint Security (HX) |
|
T1083 - File and Directory Discovery |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Forcepoint CASB |
|
T1078 - Valid Accounts |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Fortinet Enterprise Firewall |
|
T1078 - Valid Accounts |
|
Fortinet UTM |
|
T1078 - Valid Accounts |
|
Fortinet VPN |
|
T1110 - Brute Force |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
GitHub |
|
T1078 - Valid Accounts |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
GoAnywhere MFT |
|
T1083 - File and Directory Discovery |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Cloud Platform |
|
T1078 - Valid Accounts |
|
Workspace |
|
T1078 - Valid Accounts T1083 - File and Directory Discovery |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
HP Comware |
|
T1003 - OS Credential Dumping |
|
HP Virtual Connect Enterprise Manager |
|
T1078 - Valid Accounts |
|
HP iLO |
|
T1078 - Valid Accounts |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
HashiCorp Vault |
|
T1078 - Valid Accounts |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Powertech Identity Access Manager (BoKs) |
|
T1003 - OS Credential Dumping T1083 - File and Directory Discovery |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Unified Security Gateway |
|
T1003 - OS Credential Dumping |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
IBM DB2 |
|
T1083 - File and Directory Discovery |
|
IBM Racf |
|
T1078 - Valid Accounts |
|
IBM Sametime |
|
T1078 - Valid Accounts |
|
IBM Sterling B2B Integrator |
|
T1078 - Valid Accounts |
|
Infosphere Guardium |
|
T1213 - Data from Information Repositories |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
ICDB |
|
T1078 - Valid Accounts |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
CounterBreach |
|
T1213 - Data from Information Repositories |
|
Imperva File Activity Monitoring (FAM) |
|
T1083 - File and Directory Discovery |
|
Imperva SecureSphere |
|
T1078 - Valid Accounts T1213 - Data from Information Repositories |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Imprivata |
|
T1078 - Valid Accounts |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
InfoWatch |
|
T1078 - Valid Accounts |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
IPswitch MoveIt |
|
T1078 - Valid Accounts T1083 - File and Directory Discovery |
|
MoveIt DMZ |
|
T1083 - File and Directory Discovery |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Juniper Networks |
|
T1003 - OS Credential Dumping |
|
Juniper Networks Pulse Secure |
|
T1078 - Valid Accounts T1110 - Brute Force |
|
Juniper OWA |
|
T1078 - Valid Accounts |
|
Juniper VPN |
|
T1110 - Brute Force |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Kemp LoadMaster |
|
T1078 - Valid Accounts |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
LEAP |
|
T1078 - Valid Accounts |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
SharePoint |
|
T1078 - Valid Accounts T1083 - File and Directory Discovery |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
LanScope Cat |
|
T1003 - OS Credential Dumping T1078 - Valid Accounts T1083 - File and Directory Discovery |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
LastPass |
|
T1078 - Valid Accounts |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
LiquidFiles |
|
T1078 - Valid Accounts |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
LogRhythm |
|
T1003 - OS Credential Dumping |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
MariaDB |
|
T1213 - Data from Information Repositories |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
MDAM |
|
T1213 - Data from Information Repositories |
|
McAfee Endpoint Security |
|
T1083 - File and Directory Discovery |
|
McAfee NSM |
|
T1078 - Valid Accounts |
|
Skyhigh Networks CASB |
|
T1078 - Valid Accounts |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Azure |
|
T1003 - OS Credential Dumping T1078 - Valid Accounts T1083 - File and Directory Discovery T1213 - Data from Information Repositories |
|
Azure Active Directory |
|
T1078 - Valid Accounts |
|
Azure MFA |
|
T1078 - Valid Accounts |
|
Azure Security Center |
|
T1213 - Data from Information Repositories |
|
Cloud App Security (MCAS) |
|
T1078 - Valid Accounts T1083 - File and Directory Discovery |
|
Defender ATP |
|
T1003 - OS Credential Dumping T1078 - Valid Accounts T1083 - File and Directory Discovery |
|
Exchange |
|
T1078 - Valid Accounts |
|
Office 365 |
|
T1003 - OS Credential Dumping T1078 - Valid Accounts T1083 - File and Directory Discovery |
|
OneDrive |
|
T1078 - Valid Accounts T1083 - File and Directory Discovery |
|
Routing and Remote Access Service |
|
T1110 - Brute Force |
|
SQL Server |
|
T1078 - Valid Accounts T1213 - Data from Information Repositories |
|
Sysmon |
|
T1003 - OS Credential Dumping T1083 - File and Directory Discovery |
|
Windows |
|
T1003 - OS Credential Dumping T1078 - Valid Accounts T1083 - File and Directory Discovery T1110 - Brute Force |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Email Security |
|
T1078 - Valid Accounts |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Mysql |
|
T1213 - Data from Information Repositories |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
NCP |
|
T1110 - Brute Force |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
NNT ChangeTracker |
|
T1078 - Valid Accounts |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Nasuni |
|
T1083 - File and Directory Discovery |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
NetApp |
|
T1083 - File and Directory Discovery |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
NetDocs |
|
T1078 - Valid Accounts T1083 - File and Directory Discovery |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
NetIQ |
|
T1078 - Valid Accounts |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
NetMotion Wireless |
|
T1110 - Brute Force |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Security Cloud |
|
T1078 - Valid Accounts T1083 - File and Directory Discovery |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Netwrix Auditor |
|
T1078 - Valid Accounts T1083 - File and Directory Discovery |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Nortel Contivity VPN |
|
T1110 - Brute Force |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
ObserveIT |
|
T1003 - OS Credential Dumping T1078 - Valid Accounts |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Okta Adaptive MFA |
|
T1078 - Valid Accounts |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Onapsis |
|
T1078 - Valid Accounts |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
OneLogin |
|
T1078 - Valid Accounts |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Digipass |
|
T1078 - Valid Accounts |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
AVDF |
|
T1213 - Data from Information Repositories |
|
Access Manager |
|
T1078 - Valid Accounts |
|
Oracle Database |
|
T1213 - Data from Information Repositories |
|
Solaris |
|
T1003 - OS Credential Dumping |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Osirium |
|
T1078 - Valid Accounts |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Cortex XDR |
|
T1078 - Valid Accounts |
|
GlobalProtect |
|
T1078 - Valid Accounts T1110 - Brute Force |
|
NGFW |
|
T1110 - Brute Force |
|
Palo Alto Aperture |
|
T1078 - Valid Accounts T1083 - File and Directory Discovery |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Perforce |
|
T1078 - Valid Accounts |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Ping Identity |
|
T1078 - Valid Accounts |
|
PingOne |
|
T1078 - Valid Accounts |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
PostgreSQL |
|
T1213 - Data from Information Repositories |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
PowerSentry |
|
T1078 - Valid Accounts |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Pro.File DMS |
|
T1078 - Valid Accounts |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Change Auditor |
|
T1083 - File and Directory Discovery |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
RSA NetWitness |
|
T1078 - Valid Accounts |
|
SecurID |
|
T1110 - Brute Force |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
RangerAudit |
|
T1078 - Valid Accounts T1083 - File and Directory Discovery T1213 - Data from Information Repositories |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
SAP |
|
T1078 - Valid Accounts |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
SFTP |
|
T1078 - Valid Accounts T1083 - File and Directory Discovery |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
SSL Open VPN |
|
T1078 - Valid Accounts T1110 - Brute Force |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
FAM |
|
T1083 - File and Directory Discovery |
|
IdentityNow |
|
T1078 - Valid Accounts |
|
SecurityIQ |
|
T1083 - File and Directory Discovery |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Salesforce |
|
T1078 - Valid Accounts |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Seclore |
|
T1083 - File and Directory Discovery |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
SecureAuth Login |
|
T1078 - Valid Accounts |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
SecureLink |
|
T1078 - Valid Accounts |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
SecureNet |
|
T1110 - Brute Force |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Singularity |
|
T1003 - OS Credential Dumping T1078 - Valid Accounts T1083 - File and Directory Discovery |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
ServiceNow |
|
T1078 - Valid Accounts T1083 - File and Directory Discovery |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Shibboleth SSO |
|
T1078 - Valid Accounts |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Silverfort |
|
T1078 - Valid Accounts |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
ClientView |
|
T1003 - OS Credential Dumping T1078 - Valid Accounts T1083 - File and Directory Discovery |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Slack |
|
T1078 - Valid Accounts |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Snowflake |
|
T1213 - Data from Information Repositories |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Sonicwall |
|
T1110 - Brute Force |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Sophos SafeGuard |
|
T1078 - Valid Accounts |
|
Sophos XG Firewall |
|
T1110 - Brute Force |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
StealthIntercept |
|
T1083 - File and Directory Discovery |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Swift |
|
T1078 - Valid Accounts |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Swivel |
|
T1078 - Valid Accounts |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Sybase |
|
T1213 - Data from Information Repositories |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Symantec CloudSOC |
|
T1078 - Valid Accounts T1083 - File and Directory Discovery |
|
Symantec EDR |
|
T1003 - OS Credential Dumping T1083 - File and Directory Discovery |
|
Symantec Endpoint Protection |
|
T1078 - Valid Accounts |
|
Symantec VIP |
|
T1078 - Valid Accounts |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Endpoint Platform |
|
T1003 - OS Credential Dumping |
|
Integrity Monitor |
|
T1083 - File and Directory Discovery |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Teradata RDBMS |
|
T1213 - Data from Information Repositories |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
TitanFTP |
|
T1078 - Valid Accounts T1083 - File and Directory Discovery |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Deep Discovery Inspector |
|
T1078 - Valid Accounts |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
CCURE Building Management System |
|
T1078 - Valid Accounts |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Auditbeat |
|
T1003 - OS Credential Dumping T1078 - Valid Accounts |
|
Unix |
|
T1003 - OS Credential Dumping T1083 - File and Directory Discovery |
|
Unix Auditd |
|
T1003 - OS Credential Dumping |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
OpenVMS |
|
T1083 - File and Directory Discovery |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Carbon Black App Control |
|
T1003 - OS Credential Dumping T1078 - Valid Accounts T1083 - File and Directory Discovery |
|
Carbon Black Cloud Endpoint Standard |
|
T1003 - OS Credential Dumping T1078 - Valid Accounts T1083 - File and Directory Discovery |
|
Carbon Black Cloud Enterprise EDR |
|
T1003 - OS Credential Dumping T1083 - File and Directory Discovery |
|
Carbon Black EDR |
|
T1003 - OS Credential Dumping T1083 - File and Directory Discovery |
|
VMWare ID Manager (VIDM) |
|
T1078 - Valid Accounts |
|
VMware VCenter |
|
T1078 - Valid Accounts |
|
VMware View |
|
T1078 - Valid Accounts |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Data Security Platform |
|
T1083 - File and Directory Discovery |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Vectra Cognito Detect |
|
T1078 - Valid Accounts |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Vormetric |
|
T1083 - File and Directory Discovery |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Workday |
|
T1078 - Valid Accounts |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Xceedium |
|
T1078 - Valid Accounts |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Zeek Network Security Monitor |
|
T1078 - Valid Accounts T1083 - File and Directory Discovery |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Zlock |
|
T1078 - Valid Accounts |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Zscaler Internet Access |
|
T1078 - Valid Accounts |
|
Zscaler Private Access |
|
T1110 - Brute Force |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
eDocs |
|
T1078 - Valid Accounts |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
iManage |
|
T1078 - Valid Accounts |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
SonarG |
|
T1213 - Data from Information Repositories |
|
Product | Event Types | MITRE ATT&CK® TTP | Content |
---|---|---|---|
oVirt |
|
T1078 - Valid Accounts |
|