Skip to content

Latest commit

 

History

History
22 lines (20 loc) · 5.79 KB

ds_banyan_security_banyan_security.md

File metadata and controls

22 lines (20 loc) · 5.79 KB

Vendor: Banyan Security

Product: Banyan Security

Rules Models MITRE ATT&CK® TTPs Activity Types Parsers
40 17 5 2 2
Use-Case Activity Types (Legacy Event Type)/Parsers MITRE ATT&CK® TTP Content
Abnormal Authentication & Access app-login:success (app-login)
banyansecurity-bnn-json-app-login-success-adminlogin

endpoint-login:success (authentication-successful)
banyansecurity-bnn-json-endpoint-authentication-success-connectionauthorized
banyansecurity-bnn-json-app-authentication-success-identitygrant
banyansecurity-bnn-json-app-authentication-success-accessauthorized
T1078 - Valid Accounts
T1133 - External Remote Services
  • 12 Rules
  • 4 Models
Compromised Credentials app-login:success (app-login)
banyansecurity-bnn-json-app-login-success-adminlogin

endpoint-login:success (authentication-successful)
banyansecurity-bnn-json-endpoint-authentication-success-connectionauthorized
banyansecurity-bnn-json-app-authentication-success-identitygrant
banyansecurity-bnn-json-app-authentication-success-accessauthorized
T1078 - Valid Accounts
T1133 - External Remote Services
T1190 - Exploit Public Fasing Application
  • 27 Rules
  • 16 Models
Data Access app-login:success (app-login)
banyansecurity-bnn-json-app-login-success-adminlogin
T1078 - Valid Accounts
  • 5 Rules
  • 4 Models
Privilege Abuse app-login:success (app-login)
banyansecurity-bnn-json-app-login-success-adminlogin
T1078 - Valid Accounts
  • 2 Rules
Privileged Activity app-login:success (app-login)
banyansecurity-bnn-json-app-login-success-adminlogin
T1078 - Valid Accounts
  • 1 Rules
Next Page -->>

MITRE ATT&CK® Framework for Enterprise

Initial Access Execution Persistence Privilege Escalation Defense Evasion Credential Access Discovery Lateral Movement Collection Command and Control Exfiltration Impact
External Remote Services

Valid Accounts

Exploit Public Fasing Application

External Remote Services

Valid Accounts

Valid Accounts

Valid Accounts

Proxy: Multi-hop Proxy

Proxy