Skip to content

Latest commit

 

History

History
24 lines (22 loc) · 6.06 KB

ds_xceedium_xceedium.md

File metadata and controls

24 lines (22 loc) · 6.06 KB

Vendor: Xceedium

Product: Xceedium

Rules Models MITRE ATT&CK® TTPs Activity Types Parsers
46 17 4 2 2
Use-Case Activity Types/Parsers MITRE ATT&CK® TTP Content
Abnormal Authentication & Access app-login
xceedium-x-csv-app-login-success-loggedin

failed-app-login
xceedium-x-csv-app-login-fail-baduserid
T1078 - Valid Accounts
T1133 - External Remote Services
  • 15 Rules
  • 4 Models
Compromised Credentials app-login
xceedium-x-csv-app-login-success-loggedin

failed-app-login
xceedium-x-csv-app-login-fail-baduserid
T1078 - Valid Accounts
T1133 - External Remote Services
T1190 - Exploit Public Fasing Application
  • 28 Rules
  • 16 Models
Data Access app-login
xceedium-x-csv-app-login-success-loggedin

failed-app-login
xceedium-x-csv-app-login-fail-baduserid
T1078 - Valid Accounts
  • 6 Rules
  • 4 Models
Lateral Movement app-login
xceedium-x-csv-app-login-success-loggedin

failed-app-login
xceedium-x-csv-app-login-fail-baduserid
T1078 - Valid Accounts
T1090.003 - Proxy: Multi-hop Proxy
  • 2 Rules
Malware app-login
xceedium-x-csv-app-login-success-loggedin
T1078 - Valid Accounts
  • 1 Rules
Privilege Abuse app-login
xceedium-x-csv-app-login-success-loggedin

failed-app-login
xceedium-x-csv-app-login-fail-baduserid
T1078 - Valid Accounts
  • 2 Rules
Privileged Activity app-login
xceedium-x-csv-app-login-success-loggedin

failed-app-login
xceedium-x-csv-app-login-fail-baduserid
T1078 - Valid Accounts
  • 1 Rules
Ransomware app-login
xceedium-x-csv-app-login-success-loggedin

failed-app-login
xceedium-x-csv-app-login-fail-baduserid
T1078 - Valid Accounts
  • 2 Rules

MITRE ATT&CK® Framework for Enterprise

Initial Access Execution Persistence Privilege Escalation Defense Evasion Credential Access Discovery Lateral Movement Collection Command and Control Exfiltration Impact
External Remote Services

Valid Accounts

Exploit Public Fasing Application

External Remote Services

Valid Accounts

Valid Accounts

Valid Accounts

Proxy: Multi-hop Proxy

Proxy