Skip to content

Files

Latest commit

2c58859 · Jan 9, 2024

History

History
14 lines (12 loc) · 724 Bytes

r_m_ncp_ncp_Phishing.md

File metadata and controls

14 lines (12 loc) · 724 Bytes

Rules by Product and UseCase

Vendor: NCP

Product: NCP

Use-Case: Phishing

Rules Models MITRE ATT&CK® TTPs Activity Types Parsers
2 2 1 1 0
Event Type Rules Models
vpn-logout T1566 - Phishing
EM-FNum-in: Abnormal number of incoming emails
EM-BSum-in: Abnormal size of incoming emails
EM-BSum-in: Sum of bytes in incoming emails
EM-FNum-in: Count of incoming emails