Product: Sonicwall
Use-Case: Data Access
| Rules | Models | MITRE ATT&CK® TTPs | Activity Types | Parsers |
|---|---|---|---|---|
| 1 | 1 | 1 | 1 | 4 |
| Event Type | Rules | Models |
|---|---|---|
| vpn-logout | T1110 - Brute Force ↳ APP-UFL-COUNT: Abnormal number of failed application logins for user |
• APP-UFL-COUNT: Count of failed application logins in a session |