Rules | Models | MITRE ATT&CK® TTPs | Activity Types | Parsers |
---|---|---|---|---|
25 | 11 | 4 | 1 | 0 |
Use-Case | Activity Types (Legacy Event Type)/Parsers | MITRE ATT&CK® TTP | Content |
---|---|---|---|
Compromised Credentials | alert-trigger:success (network-alert) ↳trapx-t-cef-alert-trigger-success-scandetected |
T1027 - Obfuscated Files or Information T1027.005 - Obfuscated Files or Information: Indicator Removal from Tools T1190 - Exploit Public Fasing Application |
|
Malware | alert-trigger:success (network-alert) ↳trapx-t-cef-alert-trigger-success-scandetected |
TA0002 - TA0002 |
|
Initial Access | Execution | Persistence | Privilege Escalation | Defense Evasion | Credential Access | Discovery | Lateral Movement | Collection | Command and Control | Exfiltration | Impact |
---|---|---|---|---|---|---|---|---|---|---|---|
Exploit Public Fasing Application |
Obfuscated Files or Information: Indicator Removal from Tools Obfuscated Files or Information |