ds_armis_armis_platform.md

Vendor: Armis

Product: Armis Platform

Rules	Models	MITRE ATT&CK® TTPs	Activity Types	Parsers
3	2	1	1	2

Use-Case	Activity Types (Legacy Event Type)/Parsers	MITRE ATT&CK® TTP	Content
Compromised Credentials	alert-trigger:success (alert-iot) ↳armis-a-json-alert-trigger-success-systempolicyviolation ↳armis-a-json-alert-trigger-success-systempolicyviolation-1 ↳armis-a-cef-alert-trigger-success-systempolicyviolation	T1078 - Valid Accounts	3 Rules 2 Models

MITRE ATT&CK® Framework for Enterprise

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Valid Accounts		Valid Accounts	Valid Accounts	Valid Accounts